LinuxQuestions.org
Latest LQ Deal: Latest LQ Deals
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Security
User Name
Password
Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.

Notices


Reply
  Search this Thread
Old 01-14-2016, 06:51 PM   #1
wh33t
Member
 
Registered: Oct 2003
Location: Canada
Posts: 922

Rep: Reputation: 61
Is this HTTPS cert good/modern?


I'm using tutanota.com as my secure email provider and I'm curious how good their encryption is. Here is what FF reports as their cert:

Code:
TLS_ECDHE_RSA_WITH_AES128_GCM_SHA256, 128 bit keys, TLS 1.2
Is that modern and "good" (for lack of a better word)
 
Old 01-15-2016, 09:49 AM   #2
Habitual
LQ Veteran
 
Registered: Jan 2011
Location: Abingdon, VA
Distribution: Catalina
Posts: 9,374
Blog Entries: 37

Rep: Reputation: Disabled
This is a year old and may still be relevant?
http://security.stackexchange.com/qu...-aes-128-gcm-s
 
1 members found this post helpful.
Old 01-20-2016, 08:23 PM   #3
sundialsvcs
LQ Guru
 
Registered: Feb 2004
Location: SE Tennessee, USA
Distribution: Gentoo, LFS
Posts: 10,647
Blog Entries: 4

Rep: Reputation: 3933Reputation: 3933Reputation: 3933Reputation: 3933Reputation: 3933Reputation: 3933Reputation: 3933Reputation: 3933Reputation: 3933Reputation: 3933Reputation: 3933
It is my impression that the answer to your question is, "yes."
 
1 members found this post helpful.
Old 01-21-2016, 08:31 PM   #4
Steven_G
Member
 
Registered: Dec 2015
Location: Western US
Distribution: Home spun
Posts: 142

Rep: Reputation: 67
Absolutely.

It is not bleeding edge sec. But it is *very* strong encryption and they are following industry / sec best practices.

This does not mean it is uncrackable by the likes of the NSA w/ *workarounds* to circumvent the encryption. But the encryption itself is currently directly uncrackable even by them

But, unless you've got another mitigating factor like an infected router / machine, etc, then crims should not be MtMing your mail.

Here is the servers Qualys report. (You can check any published sever on the interwebs here.)

Last edited by Steven_G; 01-21-2016 at 08:33 PM.
 
1 members found this post helpful.
  


Reply



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
concat server SSL cert and chain cert LYC Linux - Newbie 2 07-20-2015 07:08 AM
[SOLVED] Need suggestion:->>Failed HTTPS transfer to https://supportfiles.sun.com/curl manalisharmabe Solaris / OpenSolaris 11 01-10-2014 12:58 AM
Creating a CSR for website HTTPS cert. What are best practices for aug 2013? sneakyimp Linux - Security 1 08-13-2013 06:12 PM
Error: Can't read cert file /etc/pki/tls/certs/cert.pem in Twiki jsaravana87 Linux - Server 1 09-09-2011 06:01 PM
OpenSSL / Sendmail verifies both "TLS cert" and "x509 cert" in client mode, why? fast-reflexes Linux - Server 0 09-12-2010 11:32 AM

LinuxQuestions.org > Forums > Linux Forums > Linux - Security

All times are GMT -5. The time now is 11:05 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration