-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
is there a way (perhaps using extended 'options' section?), to enforce a minimum cipher strength / type for the connecting client?
a solution would be to use apache 2's sslproxy to stunnel (yikes), but stunnel rocks :)
apache / mod_ssl - from httpd.conf
# SSL Cipher Suite: # List the ciphers that the client is permitted to negotiate. # See the mod_ssl documentation for a complete list. SSLCipherSuite ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:- SSLv2:+EXP:+eNULL
Concerned about your privacy? Follow this link to get secure FREE email: http://www.hushmail.com/?l=2
Free, ultra-private instant messaging with Hush Messenger http://www.hushmail.com/services-messenger?l=434
Promote security and make money with the Hushmail Affiliate Program: http://www.hushmail.com/about-affiliate?l=427