From mboxrd@z Thu Jan 1 00:00:00 1970 Path: news.gmane.org!not-for-mail From: chad Newsgroups: gmane.emacs.devel Subject: Re: Additional network security Date: Sun, 7 Dec 2014 12:37:15 -0800 Message-ID: <1621669E-1D0D-488E-B32C-EB48C72B63AE@gmail.com> References: <87lhmkja3h.fsf@uwakimon.sk.tsukuba.ac.jp> <871tobmndd.fsf@lifelogs.com> <87oarfl7d1.fsf@lifelogs.com> NNTP-Posting-Host: plane.gmane.org Mime-Version: 1.0 (Mac OS X Mail 8.1 \(1993\)) Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit X-Trace: ger.gmane.org 1417984665 1755 80.91.229.3 (7 Dec 2014 20:37:45 GMT) X-Complaints-To: usenet@ger.gmane.org NNTP-Posting-Date: Sun, 7 Dec 2014 20:37:45 +0000 (UTC) To: Lars Magne Ingebrigtsen , emacs Original-X-From: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Sun Dec 07 21:37:40 2014 Return-path: Envelope-to: ged-emacs-devel@m.gmane.org Original-Received: from lists.gnu.org ([208.118.235.17]) by plane.gmane.org with esmtp (Exim 4.69) (envelope-from ) id 1XxiaH-0001lm-M5 for ged-emacs-devel@m.gmane.org; Sun, 07 Dec 2014 21:37:37 +0100 Original-Received: from localhost ([::1]:59106 helo=lists.gnu.org) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1XxiaH-0005JU-AF for ged-emacs-devel@m.gmane.org; Sun, 07 Dec 2014 15:37:37 -0500 Original-Received: from eggs.gnu.org ([2001:4830:134:3::10]:59713) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1Xxia8-0005JB-JZ for emacs-devel@gnu.org; Sun, 07 Dec 2014 15:37:34 -0500 Original-Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1XxiZy-0006dr-HN for emacs-devel@gnu.org; Sun, 07 Dec 2014 15:37:28 -0500 Original-Received: from p3plsmtpa11-08.prod.phx3.secureserver.net ([68.178.252.109]:36259) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1XxiZy-0006de-Co for emacs-devel@gnu.org; Sun, 07 Dec 2014 15:37:18 -0500 Original-Received: from [10.0.1.37] ([75.165.99.219]) by p3plsmtpa11-08.prod.phx3.secureserver.net with id QkdF1p0074k0Ty301kdGXX; Sun, 07 Dec 2014 13:37:16 -0700 X-Sender: chad@lonesharkgames.com In-Reply-To: X-Mailer: Apple Mail (2.1993) X-detected-operating-system: by eggs.gnu.org: GNU/Linux 3.x X-Received-From: 68.178.252.109 X-BeenThere: emacs-devel@gnu.org X-Mailman-Version: 2.1.14 Precedence: list List-Id: "Emacs development discussions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Original-Sender: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Xref: news.gmane.org gmane.emacs.devel:179299 Archived-At: On 07 Dec 2014, at 09:45, Lars Magne Ingebrigtsen wrote: > >> RC4 should be disallowed on medium IMO. I *think* it already is >> disallowed in the default GnuTLS priority string. > > There are prominent web sites that only offer RC4, most famously the > video streams from Youtube. (Because Google.) The internet suggests that there are non-RC4 options for YouTube now. They're not yet supported in Firefox or IE, but that isn't necessarily a problem here. https://securitypitfalls.wordpress.com/2014/06/24/youtube-now-with-less-rc4/ ~Chad