On Thu, Mar 20, 2014 at 05:36:37PM +0100, li...@rhsoft.net wrote:
> > I would leave this at "medium", otherwise you're disabling RC4,
> > which is the best cipher available on older Windows systems
> > (Windows XP)
>
> Windows XP is happy with DES-CBC3-SHA which is not
> that broken as RC4 which with end of 2013 finally
> falls through any security audit
The Windows XP implementation of DES-CBC3-SHA in Microsoft email
products is broken at least on the server, and likely also in
various clients. It is not clear that one is better off with 3DES
than RC4. This is distraction, please avoid the knee-jerk reaction
to object. Thanks.
--
Viktor.
