SSL encryption strength

[galilao 2]

Hello:

Does anybody know how strong SSL encryption is compared to AES-256 with a 2048 key?

Thank you

[FPyro 2]

No, but it's supposed to be fairly unbreakable as well.

If you have to worry about people able to break SSL encryption, you are in deep trouble.

[Staff 9972]

Hello:

Does anybody know how strong SSL encryption is compared to AES-256 with a 2048 key?

Thank you

Hello!

Can you please clarify? OpenVPN connections in Air use AES-256-CBC packets encryption.

You might like to read here:

http://en.wikipedia.org/wiki/Transport_Layer_Security

Kind regards

[galilao 2]

Hello:

Sometimes I connect to www.airvpn.org without using the VPN tunnel and instead rely only on the https SSL encryption. However, after getting your reply, my research indicates that the SSL key length can be as low as 40 bits. My guess is that it is more secure to connect first through the airvpn tunnel then sign in.

Thank you

[Staff 9972]

Hello:

Sometimes I connect to www.airvpn.org without using the VPN tunnel and instead rely only on the https SSL encryption. However, after getting your reply, my research indicates that the SSL key length can be as low as 40 bits. My guess is that it is more secure to connect first through the airvpn tunnel then sign in.

Thank you

Hello!

SSL (as well as OpenSSL) fully supports AES. Your browser will pick one of the supported encryption and key exchange systems available on your computer. By default, browsers like Firefox have RC4-40 bit disabled. Examine the airvpn.org certificate and encryption from your browser for more details. In Firefox you can enable and disable ciphersuites through the advanced settings accessible in about:config page (look at the security.* entries). You can force your browser to employ AES 256 with https, which is fully supported on our web frontend, if you prefer to connect in this way with our website.

Your guess is right but maybe for the wrong reasons. However, connecting to our site when already connected to the VPN gives different advantages (bypass IP blocking, DNS poisoning, avoid mitm attacks and site forgery and prevent your ISP to see that you connect to this website).

Kind regards