Security on WyrmrestAccord.net

We here at WyrmrestAccord.net support the usage of security and cryptographic software on the internet. To this end, we make as extensive usage of security and cryptography as we feel comfortable without interrupting normal usage of the site and its services. This includes allowing secured connections to the website, using cryptographic keys to access the server and files, and making careful usage of firewalls and security settings both on the website and the server.

If you feel like skipping the technical discussion and just trying out the secured version of the site, please do: https://wyrmrestaccord.net. If you're capable of using it, accessing the secured site is highly recommended, especially when using a public network (such as school, work, the local cafe, etc.).

Specifically, you are required to have an SSLv3/TLSv1-enabled browser (which is pretty much every browser in existence) which supports Server Name Indication. Most modern browsers do support SNI, with the notable exception of Internet Explorer (any version) under Windows XP. You also need to have the StartCom root certificate installed -- which, again, most modern browsers and operating systems do by default.

The secured version of the site should work just fine out-of-the-box with:

  • Mozilla Firefox 2.0 or higher.
  • Opera 8.0 or higher
  • Google Chrome 6.0 or higher
  • Safari 2.1 or higher (MacOS X Leopard or better ONLY; Windows Vista or better ONLY)
  • Internet Explorer 7 or higher (Windows Vista or better ONLY)
  • ...and possibly other browser/OS combinations.

The actual security of the connection, when you use a capable browser, is provided by 2048-bit RSA, 160-bit SHA-1, and 128-bit AES, providing quite strong security against most attacks in the short-term (providing rock-solid security for at least the next five years). As new cryptograhpic technologies become available in widespread usage, we will be upgrading the algorithms and bit strengths (current targets for within the next 2 years: 3072-bit RSA, 256-bit SHA-2, 128-bit AES -- theoretically providing rock-solid security for twenty or more years).