Is RB Vulnerable to Logjam Attack?

adamlau · 21 May 2015, 10:43 AM

David · 21 May 2015, 11:15 AM

I am wondering if this Runbox specific......................

adamlau · 21 May 2015, 03:32 PM

Set the following in prefs.js for FF and all is good...

Code:

user_pref("security.ssl3.dhe_rsa_aes_128_sha", false);
user_pref("security.ssl3.dhe_rsa_aes_256_sha", false);

David · 21 May 2015, 11:57 PM

Thanks adamlau.

gecko · 22 May 2015, 03:58 AM

If I am not entirely mistaken, runbox.com upgraded their DH parameters within the past day from a 1024 to a 2048 bit prime.

Great response time, Runbox!

smithmb001 · 22 May 2015, 09:34 AM

Quote:

Originally Posted by gecko

If I am not entirely mistaken, runbox.com upgraded their DH parameters within the past day from a 1024 to a 2048 bit prime.

Great response time, Runbox!

I could not agree more!!

21 May 2015, 10:43 AM	#1
adamlau Senior Member Join Date: Jun 2006 Posts: 161	Is RB Vulnerable to Logjam Attack? Per https://weakdh.org/ ?

21 May 2015, 03:32 PM	#3
adamlau Senior Member Join Date: Jun 2006 Posts: 161	Set the following in prefs.js for FF and all is good... Code: user_pref("security.ssl3.dhe_rsa_aes_128_sha", false); user_pref("security.ssl3.dhe_rsa_aes_256_sha", false);

21 May 2015, 11:15 AM	#2
David Ultimate Contributor Join Date: Dec 2001 Location: Canada. Posts: 10,355	I am wondering if this Runbox specific......................

21 May 2015, 11:57 PM	#4
David Ultimate Contributor Join Date: Dec 2001 Location: Canada. Posts: 10,355	Thanks adamlau.

22 May 2015, 03:58 AM	#5
gecko Senior Member Join Date: Feb 2010 Posts: 107	If I am not entirely mistaken, runbox.com upgraded their DH parameters within the past day from a 1024 to a 2048 bit prime. Great response time, Runbox!