On clicking the green padlock icon in Chromium when gerrit.wikimedia.org is open, I get
Your connection to gerrit.wikimedia.org is encrypted with obsolete cryptography. The connection uses TLS 1.2. The connection is encrypted and authenticated using AES_128_GCM and uses RSA as the key exchange mechanism.
Some Chrome version says "using an obsolete cipher suite".
| Status | Subtype | Assigned | Task | ||
|---|---|---|---|---|---|
| Resolved | JanZerebecki | T55259 Add Forward Secrecy to all HTTPS sites | |||
| Resolved | fgiunchedi | T104649 Chromium says "Your connection to gerrit.wikimedia.org is encrypted with obsolete cryptography" |
Even commercial Chrome complains about this, and it's a valid complaint. Our gerrit server runs Apache 2.2 and does not have forward secrecy. There are ongoing tickets about this: (see e.g. T55259)
@polybuildr I'm going to resolve this in favor of T55259: Add Forward Secrecy to all HTTPS sites, please reopen if need be!
Why decline it? It has been resolved! Apache 2.2 now supports ECDHE. See T55259#1448222.