Hacker News Reader

Comment by danans | Hacker News Reader

#2:Use HTTPS where it matters.

In Chrome "https" is red and struck out: digitalsecurity.intel.com Identity not verified

Firefox nigthly just refuses to connect. The reason is, that the site only accepts a RC4 cypher.

    $sslscan digitalsecurity.intel.com|grep -i acc
    Accepted  TLSv1  128 bits  RC4-SHA

If irony were made of strawberries, we'd be drinking a whole lot of smoothies right about now...

Make that cheesecake and I'm in.

No-one who runs a server which only accepts RC4 (!!) with no forward security, and SHA1 signatures, in 2015, should be giving security advice.

My daily driver browser has RC4 entirely disabled. This is one of the more amusing won't-connect sites I've found.

So does it matter here?:)

Yes. It is about setting an example and practicing what you preach. There is no point in lecturing people about one aspect of security whilst getting the security wrong. You would not buy from an ecommerce site if the https:// wasn't done properly.

I probably would if I wanted the product enough, knowing I wasn't shouldering the liability using my credit card.

For me Chrome 41.0.2272.101 m (64-bit) on windows there is no cross out.

Reply on news.ycombinator.com