[tor-bugs] #25354 [Internal Services/Tor Sysadmin Team]: torproject.org using insecure ciphers/protocols (SSLv3, 3DES and RC4)

[Tor Bug Tracker & Wiki]

#25354: torproject.org using insecure ciphers/protocols (SSLv3, 3DES and RC4)
-------------------------------------------------+-------------------------
 Reporter:  pege                                 |          Owner:  tpa
     Type:  defect                               |         Status:  closed
 Priority:  Very High                            |      Milestone:
Component:  Internal Services/Tor Sysadmin Team  |        Version:
 Severity:  Major                                |     Resolution:  invalid
 Keywords:                                       |  Actual Points:
Parent ID:                                       |         Points:
 Reviewer:                                       |        Sponsor:
-------------------------------------------------+-------------------------

Comment (by arma):

 For context, yes, this week's webserver for www.torproject.org does indeed
 use old risky ciphers.

 We've asked the nice people who set it up to update it to smarter ciphers,
 and they say it will be at least a few days until they succeed.

 Hang in there everybody. :)

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/25354#comment:7>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online