mercutio: mercut.io?
how much do io domains cost?
kellytk: 60 pounds for the first year, half thereafter
mercutio: oh someone has it
oh that's expensive
there's an xyz domain name now?
yeah i not interesting
but xyz domains are $1/year
kellytk: abc.xyz was the only good domain from the lot IMHO
That has pop band written all over it
mercutio: Domain Status: BANNED https://icann.org/epp#BANNED
kellytk: Maybe Icann staffers don't like pop music
mnathani_: what was that website folks used to grade their ssl servers?
mercutio: ssllabs.com/ssltest/
mnathani_: thanks
kellytk: Nice link, thanks
mercutio: i think arp is a on that
mnathani_: takes a while to do all the tests
mercutio: yeah about 90 seconds
BryceBot: That's what she said!!
mercutio: oh look arpnetworks took 91.11 seconds to do on ipv6
BryceBot: That's what she said!!
mercutio: now it's doing the ipv4
it's a+ for arp on ipv6
132.6 seconds on ipv4
BryceBot: That's what she said!!
mercutio: pretty instane
mnathani_: lots of people are b
so wouldn't feel too bad if you got a b at first
mnathani_: yea, my wildcard ssl is a B at the moment
mercutio: yeah that's good
it's pretty anal, you have to be making all the right moves to get it up
mnathani_: SSL 3.0 is an outdated protocol version with known vulnerabilities.
mercutio: yeah disable it
mnathani_: another server
mercutio: you need tls 1.2 now too
and you want a custom dh key
mnathani_: will I have to re-key the cert?
mercutio: nope
mnathani_: reissue it rather
mercutio: not unless it's sha1 with short key length
mnathani_: that > Signature algorithm SHA1withRSA WEAK
mercutio: on the root cert or your cert?
mnathani_: all
mine, chain and root
If I am reading this right
also OpenSSL CCS vuln. (CVE-2014-0224) Yes EXPLOITABLE
mercutio: chain will be in the same file as yours
so yeh you need to get reissued
and it'll include the upgraded chain one
the root doesn't matter
mnathani_: whats that CVE vuln?
mercutio: no idea
update openssl
see if it goes away
brycec: BryceBot: no
BryceBot: Oh, okay... I'm sorry. '132.6 seconds on ipv4'
***: RandalSchwartz has quit IRC (Ping timeout: 244 seconds)
neish_ has joined #arpnetworks
neish has quit IRC (Ping timeout: 244 seconds)
m0unds has quit IRC (Ping timeout: 244 seconds)
grody has quit IRC (Ping timeout: 244 seconds)
KDE_Perry has quit IRC (Ping timeout: 244 seconds)
m0unds1 has joined #arpnetworks
KDE_Perry has joined #arpnetworks
grody has joined #arpnetworks
betojsp has joined #arpnetworks
m0unds1: cool
***: m0unds1 has left "WeeChat 1.1.1"
betojsp: /msg NickServ VERIFY REGISTER betojsp jqykgepsjqju
***: m0unds has joined #arpnetworks
plett: betojsp: oops?
***: betojsp has quit IRC ()
mercutio: haha
kellytk: :-)
***: FreeInfo has joined #arpnetworks
staticsafe has quit IRC (Ping timeout: 246 seconds)
staticsafe has joined #arpnetworks
m0unds has quit IRC (Ping timeout: 244 seconds)
m0unds has joined #arpnetworks
m0unds has left
m0unds has joined #arpnetworks
m0unds: criminy
***: gizmoguy is now known as betojsp
betojsp: oh hai
***: betojsp is now known as gizmoguy
tabthorpe has quit IRC (Remote host closed the connection)
FreeInfo has quit IRC (Ping timeout: 255 seconds)