Re: [Full-disclosure] A new way to hide from Google and Yahoo

[Daniel Veditz <dveditz@xxxxxxxxxx>]

Valdis.Kletnieks@xxxxxx wrote:
> (Personally, I wouldn't want to be using 2048 bit RSA for the actual
> stream encryption - that's something that IDEA or similar is much better for.

Where did you get the idea that's what they're doing? The site says they
use TLS provided by OpenSSL, which means the  connection is encrypted
using one of these:
http://www.openssl.org/docs/apps/ciphers.html#TLS_v1_0_cipher_suites_

The source appears to be available should someone want to check on the
details.

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/