Done enable PFS for better encryption

Discussion in 'Feature Requests' started by David, Oct 8, 2016.

  1. David

    David Administrator
    Staff Member

    Joined:
    Dec 1, 2015
    Messages:
    781
    Likes Received:
    31
    please enable PFS for encrypted TLS and SSL (https) connections in liquidfiles.What is PFS? In short: A setting in the SSL encryption. PFS will ensure a new key is used each time a user connects to the web interface.just in case some captures network traffic, this someone would need to hack the private key per connection. http://en.wikipedia.org/wiki/Perfect_forward_secrecyTo see the status of PFS in the web browser there is a nice plugin for FireFox available.https://calomel.org/firefox_ssl_validation.html
     
  2. David

    David Administrator
    Staff Member

    Joined:
    Dec 1, 2015
    Messages:
    781
    Likes Received:
    31
    Comments
    [​IMG]
    Johan Allard
    LiquidFiles
    PFS has already been added. The problem has been that the on-premise version that uses CentOS didn't get the required OpenSSL version (1.0.1e) until CentOS 6.5 that was released on the 1st of December 2013. If you update the system to the latest release, PFS will be enabled. If you're running LiquidFiles in Amazon EC2, PFS has been enabled for quite a while.

    December 12, 2013, 16:34
    [​IMG]
    Volker Schmidt
    Beta Testers
    Hi Johan, thanks you very much for your quick response. I should have updated and tested again before I ask you.
    It’s a pleasure to see how the file transfer has developed in the years and you are constantly improving it.
    The liquidfiles VM here in Hamburg is always up and running, I even use it as a reference for availability of our private could.

    December 13, 2013, 02:47
     

Share This Page