[AusNOG] AU Major Banks and SHA-1

[Paul Wilkins]

No HSTS either, but Commbank has it right again.

On an entirely unrelated note, how do you spell PLA U61398?

In fairness, most of the security out there is not fit for purpose. You
can't bandaid it on as an afterthought.

Paul Wilkins

On 26 June 2015 at 08:14, Matthew Moyle-Croft <mmc at mmc.com.au> wrote:

>
>
> Commbank - got it right - no SHA-1 for home page or Internet Banking, no
> TLS 1.0
> ANZ - no SSL on home page, TLS 1.0 and SHA-1 for internet banking (oh boy!)
> NAB -  no SSL on home page, TLS 1.2 and SHA-1 for internet banking
> Westpac - no SSL on home page, TLS 1.2 and SHA-1 for internet banking
>
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.ausnog.net/pipermail/ausnog/attachments/20150626/c16bb3ef/attachment.html>