Cloud Computing and Technology Management Insight from Brian Parsons rss

Why Android SSL was downgraded from AES256-SHA to RC4-MD5 in late 2010

October 14, 2013 at 08:28 PM    


Nice sleuthing and humorously written alert / background info on SSL connections in Android. SSL is one of the least problematic security / privacy issues with a smartphone, but I found it entertaining as I have gone through a round of hardening servers and apps and in the process have learned much about ciphers and handshake protocols.

Link: Why Android SSL was downgraded from AES256-SHA to RC4-MD5 in late 2010


blog comments powered by Disqus

This is the personal web site of Brian Parsons. The views and opinions expressed in essays written on this web site are my own and are in no way related to or reflective of any company that I am associated with.

Creative Commons License Unless otherwise noted, this work is licensed under the Creative Commons Attribution 3.0 Unported License.

Other Work By Brian