#722047 iceweasel: technical details of encryption are insufficient

#722047#5
Date:
2013-09-07 00:38:54 UTC
From:
To:
The details provided in the Technical Details section of the security
dialog are not very helpful.  Yes, they tell me that
bugzilla.mozilla.org is using 256-bit AES, but they don't tell me what
version of TLS is being used (are we using TLS 1.0 with the CBC bug),
the key exchange method (is perfect forward secrecy being used?),
whether CBC or GCM is being used (hopefully the latter), or any other
information about the cipher suite.  I can surmise the signature
algorithm from the certificate provided.  All of this information is
important as technical details, since all of it impacts security.  To my
knowledge, there is no way to acquire this on the client side.

Chromium provides the full cipher suite, although not the TLS version
(last I checked).  Please provide all of this information in the dialog,
or at least provide the user some way to see it.