[tor-bugs] #24645 [Community]: Attention: some exit nodes are downgrading HTTPS encryption cipher!

Tor Bug Tracker & Wiki blackhole at torproject.org
Sun Dec 17 23:19:15 UTC 2017


#24645: Attention: some exit nodes are downgrading HTTPS encryption cipher!
-------------------------+-------------------------
 Reporter:  cypherpunks  |          Owner:  alison
     Type:  task         |         Status:  closed
 Priority:  High         |      Milestone:
Component:  Community    |        Version:
 Severity:  Normal       |     Resolution:  invalid
 Keywords:               |  Actual Points:
Parent ID:               |         Points:
 Reviewer:               |        Sponsor:
-------------------------+-------------------------
Changes (by yawning):

 * status:  new => closed
 * resolution:   => invalid


Comment:

 I suggest familiarizing yourself with how TLS negotiates CipherSuites, and
 the purpose of the `Finished` message
 (https://tools.ietf.org/html/rfc5246#section-7.4.9), and if this issue
 personally affects you, to complain to EA about it to get them to change
 their server configuration.

 https://www.ssllabs.com/ssltest/analyze.html?d=signin.ea.com

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/24645#comment:1>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tor-bugs mailing list