Viewing profile — zzq1015

From the Datatracker, I can see that it was called SEARCH until draft-2 (Nov 2021), and then changed to QUERY. Also, the previous SEARCH method was proposed in Apr 2015 (!!), but n…

PSA: When posting an RFC or (especially) an RFC-draft, please use the IETF Datatracker URL. For example, this one is: https://datatracker.ietf.org/doc/draft-ietf-httpbis-safe-met..…

I mean, when your business is big enough, you'll naturally start to hire more people. Small businesses don't require a large staff and typically don't generate a substantial amount…

What if we implement UBI in a way that: 1. Companies not participating in UBI: they have to hire people, even for nothing, but all the staff have to be paid. 2. The others: they ar…

It's a mess when you learn there are also 6in4, 6rd and teredo...

For Linux, there's a kernel setting for that. Just run sysctl -w net.ipv6.bindv6only=1 so IPv6 will not include IPv4-mapped addresses. https://www.kernel.org/doc/Documentation/netw…

Yeah, despite what it says, I really think Google is gonna ditch 3DES across the board, starting from Gmail.

0.38% of what? For sites like Google, it's still too large to ignore. Also, a fun fact: Google still serves plain HTTP for really old clients, just in case the client barely suppor…

Oh, I meant on Gmail servers. I always customize TLS versions and cipher suites because I don't trust the defaults. AFAIK you can customize them on: - Chrome & Firefox (can only en…

"The obvious way to avoid these attacks is to stop using legacy 64-bit block ciphers. Alternatively, the attack can be mitigated by rekeying the session frequently." - https://swee…

DES is weak because it only uses 56 bits, and you can brute force it. 3DES has 168 (56*3) bits with the security of 112 (56*2) bits.

I had no idea that you can filter/reject certain TLS versions/ciphers ( on Gmail servers ) before seeing this on the HN front page. https://support.google.com/a/answer/9795993

Probably not just that. 3DES is the last cipher supported by "old" clients (I'm talking Windows XP). If you remove 3DES, the TLS connection will simply fail. You can never imagine …