TLS config check

[Robert Schetterer]

Am 07.02.2015 um 11:05 schrieb SW:
> 
>> Short: See my last answer - secure is never a black or white decission.
>> The chosen cypher will protect your traffic and its better than plain
>> text.
>>
>> Long: The client negotiates the supported ciphers with the server and
>> chooses one that fits for him. I *guess* that k9/anroid simply does not
>> support the GCM cipher and therefore uses another one. To get the "best"
>> result you need to list up all supported ciphers of your client and
>> server and choose one, but be warned that if you ask two analyst, you
>> might not get the same answer which is "best" as this dependes on the
>> kind of threats you want to take care of
>>
>>
>> Oliver
>>
> 
> Thanks Oliver.
> 
> I had a look at:
> 
> https://www.ssllabs.com/ssltest/viewClient.html?name=Android&version=4.4.2
> 
> And Android 4.4.2 does support:
> 
> ECDHE-ECDSA-AES128-GCM-SHA256
> 
> So why then does K9 not connect using GCM? Could K9 mail not support
> this cipher? If Android supports it does this mean that K9 mail will
> support it too?

K9 questions should go to

https://code.google.com/p/k9mail/issues/list


> 
> Just trying to figure out WHY I can't get K9 to use GCM!



Best Regards
MfG Robert Schetterer

-- 
[*] sys4 AG

http://sys4.de, +49 (89) 30 90 46 64
Franziskanerstraße 15, 81669 München

Sitz der Gesellschaft: München, Amtsgericht München: HRB 199263
Vorstand: Patrick Ben Koetter, Marc Schiffbauer
Aufsichtsratsvorsitzender: Florian Kirstein