ssl - TLSv1.2 with SHA1? -


i'm sure there easy answer this, how using tlsv1.2 non-tlsv1.2 cipher suites? example this link shows connection using tls 1.2, using aes_256_cbc_sha ? thought tlsv1.2 had sha256 or higher?

and, paypal home shows "connection uses tls 1.2", cipher selected rsa_128_rc4_sha ???

am missing something? (all info using google chrome)

can't post screenchot of capture because don't have @ least 10 reputation??? wtf

tls 1.2 still supports ciphers earlier ssl/tls version defined, includes insecure ciphers using rc4, export ciphers etc. defines new ciphers, gcm ciphers , various ciphers using sha384 hmac.

i thought tlsv1.2 had sha256 or higher

no , confuse deprecating sha-1 signature algorithm certificates. deprecation independent tls although certificates used in connection tls. , use of sha-1 or md5 hmac ciphers still considered safe, because security assumptions needed hmac , certificate signature different.

apart better forum these kind of questions security.stackexchange.com.


Comments

Popular posts from this blog

asp.net mvc - SSO between MVCForum and Umbraco7 -

Python Tkinter keyboard using bind -

ubuntu - Selenium Node Not Connecting to Hub, Not Opening Port -