{"action":"created","issue":{"url":"https://api.github.com/repos/ssllabs/ssllabs-scan/issues/411","repository_url":"https://api.github.com/repos/ssllabs/ssllabs-scan","labels_url":"https://api.github.com/repos/ssllabs/ssllabs-scan/issues/411/labels{/name}","comments_url":"https://api.github.com/repos/ssllabs/ssllabs-scan/issues/411/comments","events_url":"https://api.github.com/repos/ssllabs/ssllabs-scan/issues/411/events","html_url":"https://github.com/ssllabs/ssllabs-scan/issues/411","id":182106105,"number":411,"title":"Is secp521r1 really gone in Safari 10 / OS X 10.12 (dev.ssllabs.com)?","user":{"login":"Darkudorus","id":17962859,"avatar_url":"https://avatars.githubusercontent.com/u/17962859?v=3","gravatar_id":"","url":"https://api.github.com/users/Darkudorus","html_url":"https://github.com/Darkudorus","followers_url":"https://api.github.com/users/Darkudorus/followers","following_url":"https://api.github.com/users/Darkudorus/following{/other_user}","gists_url":"https://api.github.com/users/Darkudorus/gists{/gist_id}","starred_url":"https://api.github.com/users/Darkudorus/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/Darkudorus/subscriptions","organizations_url":"https://api.github.com/users/Darkudorus/orgs","repos_url":"https://api.github.com/users/Darkudorus/repos","events_url":"https://api.github.com/users/Darkudorus/events{/privacy}","received_events_url":"https://api.github.com/users/Darkudorus/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":{"login":"bhushan5640","id":6083185,"avatar_url":"https://avatars.githubusercontent.com/u/6083185?v=3","gravatar_id":"","url":"https://api.github.com/users/bhushan5640","html_url":"https://github.com/bhushan5640","followers_url":"https://api.github.com/users/bhushan5640/followers","following_url":"https://api.github.com/users/bhushan5640/following{/other_user}","gists_url":"https://api.github.com/users/bhushan5640/gists{/gist_id}","starred_url":"https://api.github.com/users/bhushan5640/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/bhushan5640/subscriptions","organizations_url":"https://api.github.com/users/bhushan5640/orgs","repos_url":"https://api.github.com/users/bhushan5640/repos","events_url":"https://api.github.com/users/bhushan5640/events{/privacy}","received_events_url":"https://api.github.com/users/bhushan5640/received_events","type":"User","site_admin":false},"assignees":[{"login":"bhushan5640","id":6083185,"avatar_url":"https://avatars.githubusercontent.com/u/6083185?v=3","gravatar_id":"","url":"https://api.github.com/users/bhushan5640","html_url":"https://github.com/bhushan5640","followers_url":"https://api.github.com/users/bhushan5640/followers","following_url":"https://api.github.com/users/bhushan5640/following{/other_user}","gists_url":"https://api.github.com/users/bhushan5640/gists{/gist_id}","starred_url":"https://api.github.com/users/bhushan5640/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/bhushan5640/subscriptions","organizations_url":"https://api.github.com/users/bhushan5640/orgs","repos_url":"https://api.github.com/users/bhushan5640/repos","events_url":"https://api.github.com/users/bhushan5640/events{/privacy}","received_events_url":"https://api.github.com/users/bhushan5640/received_events","type":"User","site_admin":false}],"milestone":null,"comments":3,"created_at":"2016-10-10T20:22:16Z","updated_at":"2016-10-12T12:41:14Z","closed_at":null,"body":"@ivanr  @bhushan5640 \r\n**Is this really true? Which (beta?) version exaclty had this, when you checked it?**\r\nhttps://dev.ssllabs.com/ssltest/viewClient.html?name=Safari&version=10&platform=OS%20X%2010.12&key=138\r\n>  Safari 10 / OS X 10.12\r\n> Elliptic curves: x25519, secp256r1, secp384r1 \r\n\r\n**My email to Apple because I was afraid about this**\r\nSubject: Re-enable curve secp521r1 (TLS implementation) / broken systems\r\n> Please re-enable P-521 again. (missing since Safari 10 / macOS 10.12)\r\n> https://www.keylength.com/en/3/ Level 8 (same security level as symmetric 256 bit) is desired.\r\n> Please don't weaken long-term security without need.\r\n> You can stop announce P-521 be default, only if Curve 448 has been implemented\r\n> and if Let's Encrypt signs Curve 448 Certificates and if other browsers speak that curve too.\r\n> Mozilla is keeping P-521 too https://bugzilla.mozilla.org/show_bug.cgi?id=1128792#c19\r\n\r\n**Apple's reply**\r\n> Please include the line below in follow-up emails for this request.\r\n>\r\n> Follow-up: [...]\r\n> Hello,\r\n> \r\n> Thank you for contacting us. Apple takes all reports of potential security issues seriously.\r\n> \r\n> In order to help us reproduce and investigate this issue, we will need some additional details. Do you have a packet capture showing a TLS handshake from Safari on macOS 10.12 where the P-521 curve is disabled? If so, we would appreciate it if you could send that along to us.\r\n> \r\n> Best regards,\r\n[...]\r\n> Apple Product Security\r\n\r\n\r\nSomeone wrote on the [heise.de forums](https://www.heise.de/forum/Mac-i/News-Kommentare/Apple-Chef-Tim-Cook-Ohne-Verschluesselung-keine-Sicherheit/Re-A-hat-elliptische-Kurve-secp521r1-long-term-security-bei-OS-X-10-12-entfe/posting-29311249/show/) that he has macOS 10.12 (16A323)  + safari 10.0 (12602.1.50.0.10) and gets \"Elliptic curves secp256r1, secp384r1, secp521r1\" as result. And where is x25519?\r\n"},"comment":{"url":"https://api.github.com/repos/ssllabs/ssllabs-scan/issues/comments/253202280","html_url":"https://github.com/ssllabs/ssllabs-scan/issues/411#issuecomment-253202280","issue_url":"https://api.github.com/repos/ssllabs/ssllabs-scan/issues/411","id":253202280,"user":{"login":"bhushan5640","id":6083185,"avatar_url":"https://avatars.githubusercontent.com/u/6083185?v=3","gravatar_id":"","url":"https://api.github.com/users/bhushan5640","html_url":"https://github.com/bhushan5640","followers_url":"https://api.github.com/users/bhushan5640/followers","following_url":"https://api.github.com/users/bhushan5640/following{/other_user}","gists_url":"https://api.github.com/users/bhushan5640/gists{/gist_id}","starred_url":"https://api.github.com/users/bhushan5640/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/bhushan5640/subscriptions","organizations_url":"https://api.github.com/users/bhushan5640/orgs","repos_url":"https://api.github.com/users/bhushan5640/repos","events_url":"https://api.github.com/users/bhushan5640/events{/privacy}","received_events_url":"https://api.github.com/users/bhushan5640/received_events","type":"User","site_admin":false},"created_at":"2016-10-12T12:41:13Z","updated_at":"2016-10-12T12:41:13Z","body":"@Darkudorus please verify now https://dev.ssllabs.com/ssltest/viewClient.html?name=Safari&version=10&key=138"}}
{"actor":{"display_login":"bhushan5640"}}