What to do about SSL strength

Thiago Macieira thiago at kde.org
Wed Mar 8 14:57:10 GMT 2006


Nicolas Goutte wrote:
>Could it be done optionally site-by-site like for Java or for
> JavaScript?
>
>So basically it would mean that KDE does not use 128 bit or less SSL but
> that a user can tell KDE: "this site is too stupid but I really need
> it, so use 128 bits SSL for this site".

We're talking about libkio (kio/kssl) here, not Konqueror or even 
kio_http.

This is actually like the "broken DNS server" list: we have to work around 
bugs in other people's sites in very low level stuff in our libraries.

And like the "broken DNS server" list, this should be something we ship, 
not something users configure. They'll always think it's Konqueror at 
fault, not the website they're trying to use and will never look for a 
solution in the configuration.
-- 
  Thiago Macieira  -  thiago (AT) macieira.info - thiago (AT) kde.org
    PGP/GPG: 0x6EF45358; fingerprint:
    E067 918B B660 DBD1 105C  966C 33F5 F005 6EF4 5358

3. Ac seo woruld wearð geborod, swá se Scieppend cwæð "Gewurde Unix" and 
wundor fremede and him "Unix" genemned, þæt is se rihtendgesamnung.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 191 bytes
Desc: not available
URL: <http://mail.kde.org/pipermail/kde-core-devel/attachments/20060308/2ab05cea/attachment.sig>


More information about the kde-core-devel mailing list