Sep.18

Google Finally Disabling SSLv3 and RC4

Google has posted about its intention to finally disable SSLv3 and the cipher RC4. This is great news as Google is responsible forĀ an insane level of web traffic and to know that the encryption they use to secure all of those transactions will be greater secured is brilliant!

SSLv3 has been obsolete for over 16 years and is so full of known problems that the IETF has decided that it must no longer be used. RC4 is a 28 year old cipher that has done remarkably well, but is now the subject of multiple attacks at security conferences. The IETF has decided that RC4 also warrants a statement that it too must no longer be used.

Source: Google Online Security Blog: Disabling SSLv3 and RC4

News