If you have time pls read the hole report here:
https://arxiv.org/pdf/1809.08729.pdf
I hope that Untangle staff already has seen this report and that we can push the SSL/TLS parts of Untangle to an even better solution.
It will take time and $ but it will be worth it if we can beat cisco and i think it is in reach!
But still Amazing that Untangle is on the list!
From a very fast glimpse at the article (less than 5 minutes :rolleyes:), most of the important issues could be corrected very easily and fast, e.g. the RSA-512 root agency issue. As it goes everywhere, code/library/resource reuse often lead to these scenarios.
Making it so the End user during setup or after can modify the Root CA and Chiphers etc Untangle could win the Market.
But the hard part will be support and havinge a legacy support.
In my case we only have "modern" OS:es so we want to up the defaults to better/securer but if you have XP/NT or even older systems then you migh have all types of issues with RSA-512 etc.
If you're still allowing XP to get to the internet, security is obviously not on your list of priorities anyway...
You'd be surprised to see how many XP SCADA systems out there are calling home to their vendors for remote maintenance and - uh uh - updates :rolleyes:Quote:
Originally Posted by sky-knight