cipher suites matter

cipher-suites-matter

# problem description and cve's:
https://www.gracefulsecurity.com/tls-ssl-vulnerabilities/

# example attack:
# https://www.youtube.com/watch?v=3I_05zY6ZfM

# install nmap
# list cipher suites:
nmap -sV --script ssl-enum-ciphers -p 443 <host>
#rate based on this: https://github.com/ssllabs/research/wiki/SSL-Server-Rating-Guide

#sweet32
https://sweet32.info/
(pl) https://kryptosfera.pl/post/3des-i-blowfish-w-opalach-atak-sweet32/

#RC4 NO MORE
https://www.youtube.com/watch?time_continue=2&v=d8MtmKrXlKQ

# nice article about cipher suites:
https://medium.com/@davetempleton/tls-configuration-cipher-suites-and-protocols-a01ee7005778