<html>
<head>
<meta content="text/html; charset=windows-1252"
http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<div class="moz-cite-prefix">On 2015-04-20 07:52, "Thomas B. Rücker"
wrote:<br>
</div>
<blockquote cite="mid:55349415.7090408@ruecker.fi" type="cite">
<pre wrap="">On 04/20/2015 05:47 AM, Ralph Giles wrote:
</pre>
<blockquote type="cite">
<pre wrap="">On 19/04/15 08:15 PM, "Thomas B. Rücker" wrote:
</pre>
<blockquote type="cite">
<pre wrap="">If anyone happens to know about proven secure settings, just like the
Mozilla labs settings for server side, please let us know.
</pre>
</blockquote>
<pre wrap="">You mean like <a class="moz-txt-link-freetext" href="https://wiki.mozilla.org/Security/Server_Side_TLS">https://wiki.mozilla.org/Security/Server_Side_TLS</a> ?
</pre>
</blockquote>
<pre wrap="">
Yes, that's what we used for the Icecast server default cipher list, now
if Mozilla has that for the *client* side, that would be interesting. I
looked around but didn't see it.
There seem to be subtle differences of what makes sense and what needs
to be configured, when compared to a server.
TBR
</pre>
</blockquote>
<br>
In my oppinion (for what it's worth) I'd go by:<br>
<table class="wikitable">
<tbody>
<tr>
<th>Configuration </th>
<th> Oldest compatible client
</th>
</tr>
<tr>
<td> <span style="color:green;"><b>Modern</b></span> </td>
<td> Firefox 27, Chrome 22, IE 11, Opera 14, Safari 7, Android
4.4, Java 8
</td>
</tr>
<tr>
<td> <span style="color:orange;"><b>Intermediate</b></span> </td>
<td> Firefox 1, Chrome 1, IE 7, Opera 5, Safari 1, Windows XP
IE8, Android 2.3, Java 7
</td>
</tr>
<tr>
<td> <span style="color:gray;"><b>Old</b></span> </td>
<td> Windows XP IE6, Java 6
</td>
</tr>
</tbody>
</table>
<br>
By the looks of it Intermediate is the way to go for compatibility.<br>
But perhaps a flag to change from intermediate to modern would be
useful?<br>
<br>
But if Windows 7 and Windows Server 2008 R2 are the oldest Windows
(oldest WIndows that IE11 will install on) target then going for
"modern" may be better.<br>
It's Windows XP that is potentially holding back things. (are there
any stats on this regarding icecast and libshout?)<br>
<br>
<pre class="moz-signature" cols="72">--
Roger Hċgensen, Freelancer, <a class="moz-txt-link-freetext" href="http://skuldwyrm.no/">http://skuldwyrm.no/</a></pre>
</body>
</html>