crypto101 / website Goto Github PK

Currently Twisted uses TLSv1_METHOD which is kind of silly, so we set SSLv23_METHOD. Twisted 14.0.0 won't have this defect.

We need a test that verifies we're loading DH params in WebsiteService._getCtxFactory.

I think the best way to do this is to mock out Context or PrivateCertificate; OpenSSL certainly doesn't expose any sane APIs.

Right now the three-column thing is hardcoded. It'd be nice if it weren't.

intro to XOR section only describes 3 of the 4 states. Later you explain 0+0=0 but should also do it here.

5.1 Description
Exclusive or, often called “XOR”, is a Boolean1 binary2 operator that is true when either the first input or the second input, but not both, are true.

(It's in the project repo)

I don't understand grunt. I do understand gulp. I just want to get a website running; I don't really care about learning grunt either.

This relies on https://twistedmatrix.com/trac/ticket/6802

I think the best way to do this is to mock out PrivateCertificate, since there doesn't appear to be a sane way to access the method on a real Context object.

Right now the Gruntfile uses compass to build. This is pointless; we're just using Sass and Bourbon right now (although quite frankly I would like to get rid of them in favor of a bunch of stuff that just runs on Node, so that I can axe Ruby out of the development process too).

This is annoying because it means we have to do gem install compass --pre right now; the regular Compass (0.12.3) depends on a Sass version (3.2.14) that is too old to support Bourbon.

Maybe this would be a good time to convert the whole thing to Gulp. I never liked that Gruntfile anyway.

Twisted's PrivateCertificate (and by extension, pem, which we use), doesn't support passing ephemeral Diffie-Hellman parameters. This is necessary to support DHE ciphersuites.

This is fixed in tm.tl/6799, currently in trunk but not yet released. This means that we can stop doing the ctx.load_tmp_dh('tmp_dh_file') dance.

I tried to subscribe to email updates and the button appeared to do nothing. Network says POST to https://www.crypto101.io/subscribe responds with 405. Just wanted to bring it to your attention. Thanks!