Re: [security-services] TLS & SSL ciphersuite language

Do we know if any of the browsers actually implement 3des?

> So, since we're operating in OASIS rather than the IETF, I suggest we specify
> the following TLS and SSL ciphersuites as MTI..
> 
>     TLS_RSA_WITH_3DES_EDE_CBC_SHA  (when using TLS)
>     SSL_RSA_WITH_3DES_EDE_CBC_SHA  (when using SSL)

The real world is clearly RSA/128-bit RC4.


-- 
Zolera Systems, Securing web services (XML, SOAP, Signatures,
Encryption)
http://www.zolera.com