I didn't try it in Chrome, but in Firefox I get the following. Is that right?
Secure Connection Failed
An error occurred during a connection to demo.cmrg.net. SSL received a weak ephemeral Diffie-Hellman key in Server Key Exchange handshake message. (Error code: ssl_error_weak_server_ephemeral_dh_key)
The page you are trying to view cannot be shown because the authenticity of the received data could not be verified.
Please contact the website owners to inform them of this problem. Alternatively, use the command found in the help menu to report this broken site.
Flagged. That's pretty annoying reirob; I assumed that would be a link to an article about the URL, since just crashing my browser was obviously a bad thing to do.
Question to downvoters: You don't ever click down the list of Hacker News submissions without thinking too hard first, or you don't think crashing my browser (and losing any state I had in them) is annoying?
Well, I have got it from Fefe's blog [1] directly as the link. I tried it out before submitting, i.e. I opened a Chromium browser and put the link. The title says what it does - I do not think it is link bait. And Fefe's blog gives as explanation (rough translation from German): The TLS handshake of this site kills Chrome browser.
I too want to know what goes on and I actually think that HN IS the place to submit this kind of bugs.
That helps when the website code itself is malicious/broken. This crash is due a bug in the underlying TLS code itself. I don't think TLS is sandboxed or separated-per-tab, nor should it expectedly be.
34 comments
[ 2.7 ms ] story [ 85.4 ms ] threadSSL received a weak ephemeral Diffie-Hellman key in Server Key Exchange handshake message.
I'm using chrome on android, and it doesn't crash and the lock icon info doesn't show anything that jumps out as wrong.. ?
[1] http://blog.fefe.de/?ts=adeb1bd6
Blog from Chrome- and TLS developer Adam Langley: https://www.imperialviolet.org/2014/03/03/triplehandshake.ht...
Secure Connection Failed
An error occurred during a connection to demo.cmrg.net. SSL received a weak ephemeral Diffie-Hellman key in Server Key Exchange handshake message. (Error code: ssl_error_weak_server_ephemeral_dh_key)
Question to downvoters: You don't ever click down the list of Hacker News submissions without thinking too hard first, or you don't think crashing my browser (and losing any state I had in them) is annoying?
I too want to know what goes on and I actually think that HN IS the place to submit this kind of bugs.
<img src="https://demo.cmrg.net/">
It's some sort of regression and a patch is already in review: https://codereview.chromium.org/178003011/
Stop karma whoring with this irresponsible shit.
http://i3.kym-cdn.com/entries/icons/original/000/014/009/mic...
Here's what I found in my blog: http://blog.hboeck.de/archives/841-Diffie-Hellman-and-TLS-wi...