Skip to content

Comment on Balancer Battle – Load testing HAproxy, Nginx and HTTP-Proxy's WebSocket support

Comments

Even though RC4 is fast you really shouldn't be using it: http://www.isg.rhul.ac.uk/tls/

There aren't a whole lot of other options yet. https://community.qualys.com/blogs/securitylabs/2013/03/19/r...

You can enable TLS 1.2 ciphers, but there is a large percentage of clients unable to use them, so the fallback is RC4.

> At the moment, the attack is not yet practical because it requires access to millions and possibly billions of copies of the same data encrypted using different keys

So we have some time.

V1OP

Even Google is using it ;)

AboutSource Built by g1lg1l

Hackerly is an independent reader for Hacker News, built on the public HN API. Not affiliated with Y Combinator.