6 Apr
2012
6 Apr
'12
10:53 a.m.
Thomas Manson wrote:
gmail for example has AES_128_CBC for crypting, can we get that without much effort?
Of course. The option you want is: ciphers = AES128-SHA
BTW: Bear in mind that CBC-based ciphers are vulnerable to the Beast attack, and thus *less* secure than stunnel default. https://www.net-security.org/article.php?id=1638
Mike