{"id":444,"date":"2019-08-08T16:38:55","date_gmt":"2019-08-08T14:38:55","guid":{"rendered":"https:\/\/netgab.net\/web\/?p=444"},"modified":"2022-01-26T07:04:16","modified_gmt":"2022-01-26T06:04:16","slug":"eap-tls-ciphers","status":"publish","type":"post","link":"https:\/\/netgab.net\/web\/2019\/08\/08\/eap-tls-ciphers\/","title":{"rendered":"EAP TLS ciphers"},"content":{"rendered":"\n<div class=\"wp-block-columns alignwide is-layout-flex wp-container-core-columns-is-layout-28f84493 wp-block-columns-is-layout-flex\">\n<div class=\"wp-block-column is-vertically-aligned-center is-layout-flow wp-block-column-is-layout-flow\" style=\"flex-basis:100%\">\n<p>In many projects regarding network access control are focussing on probably secure EAP methods, which rely on SSL\/TLS. The most common examples are EAP-TLS or PEAP (simply because must supplicants support them).<\/p>\n<p>However, it&#8217;s not enough to check whether the authentication server or supplicant support the desired SSL\/TLS based EAP method. Often it comes down to cipher suites.<\/p>\n<p>Especially if using PEAP, the credentials are transported in a SSL\/TLS tunnel. Of course you want to make sure, that the credentials are transported in a safe way. Besides security, there are functional aspects as well. Imagine there is some client in your network &#8211; let&#8217;s say 10 years old, which is in theory able to do EAP-TLS and PEAP. Maybe the client only supports cipher suites, based on DES or 3DES encryption and MD5 signatures (e.g. TLS_RSA_WITH_3DES_EDE_CBC_SHA)<\/p>\n<p>If there are such clients in your network, the authentication server must be configured to support those ciphers (if possible) or the clients must be updated or replaced.<\/p>\n<p><strong>If there are no matching cipher suites on the authentication server and the supplicant, the authentication will fail.<\/strong><\/p>\n<p>Some examples:<\/p>\n<p><strong>Windows 7 native supplicant (as of 01\/2019)<\/strong><\/p>\n<p>TLS version: <span style=\"color: #ff0000;\">1.0<\/span><\/p>\n<p>Supported cipher suites:<\/p>\n<ul style=\"list-style-type: disc;\">\n<li>TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA<\/li>\n<li>TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA<\/li>\n<li>TLS_RSA_WITH_AES_256_CBC_SHA<\/li>\n<li>TLS_RSA_WITH_AES_128_CBC_SHA<\/li>\n<li>TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA<\/li>\n<li>TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA<\/li>\n<li>TLS_DHE_DSS_WITH_AES_256_CBC_SHA<\/li>\n<li>TLS_DHE_DSS_WITH_AES_128_CBC_SHA<\/li>\n<li>TLS_RSA_WITH_3DES_EDE_CBC_SHA<\/li>\n<li>TLS_DHE_DSS_WITH_3DES_EDE_CBC_SHA<\/li>\n<li>TLS_RSA_WITH_RC4_128_SHA<\/li>\n<li>TLS_RSA_WITH_RC4_128_MD5<\/li>\n<\/ul>\n<p>Don&#8217;t even consider to disable TLS 1.0 or SHA-1 support in your authentication server if using Windows 7 clients.<\/p>\n<p><strong>Windows 10 native supplicant (as of 01\/2019)<\/strong><\/p>\n<p>Windows 10 looks way better<\/p>\n<p>TLS version: <span style=\"color: #339966;\">1.2<\/span><\/p>\n<ul>\n<li>TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384<\/li>\n<li>TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 (0xc02b)<\/li>\n<li>TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (0xc030)<\/li>\n<li>TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (0xc02f)<\/li>\n<li>TLS_DHE_RSA_WITH_AES_256_GCM_SHA384 (0x009f)<\/li>\n<li>TLS_DHE_RSA_WITH_AES_128_GCM_SHA256 (0x009e)<\/li>\n<li>TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384 (0xc024)<\/li>\n<li>TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256 (0xc023)<\/li>\n<li>TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384 (0xc028)<\/li>\n<li>TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256 (0xc027)<\/li>\n<li>TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA (0xc00a)<\/li>\n<li>TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA (0xc009)<\/li>\n<li>TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA (0xc014)<\/li>\n<li>TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA (0xc013)<\/li>\n<li>TLS_DHE_RSA_WITH_AES_256_CBC_SHA (0x0039)<\/li>\n<li>TLS_DHE_RSA_WITH_AES_128_CBC_SHA (0x0033)<\/li>\n<li>TLS_RSA_WITH_AES_256_GCM_SHA384 (0x009d)<\/li>\n<li>TLS_RSA_WITH_AES_128_GCM_SHA256 (0x009c)<\/li>\n<li>TLS_RSA_WITH_AES_256_CBC_SHA256 (0x003d)<\/li>\n<li>TLS_RSA_WITH_AES_128_CBC_SHA256 (0x003c)<\/li>\n<li>TLS_RSA_WITH_AES_256_CBC_SHA (0x0035)<\/li>\n<li>TLS_RSA_WITH_AES_128_CBC_SHA (0x002f)<\/li>\n<li>TLS_RSA_WITH_3DES_EDE_CBC_SHA (0x000a)<\/li>\n<li>TLS_DHE_DSS_WITH_AES_256_CBC_SHA256 (0x006a)<\/li>\n<li>TLS_DHE_DSS_WITH_AES_128_CBC_SHA256 (0x0040)<\/li>\n<li>TLS_DHE_DSS_WITH_AES_256_CBC_SHA (0x0038)<\/li>\n<li>TLS_DHE_DSS_WITH_AES_128_CBC_SHA (0x0032)<\/li>\n<li>TLS_DHE_DSS_WITH_3DES_EDE_CBC_SHA (0x0013)<\/li>\n<li>TLS_RSA_WITH_RC4_128_SHA (0x0005)<\/li>\n<li>TLS_RSA_WITH_RC4_128_MD5 (0x0004)<\/li>\n<\/ul>\n<p>So with a pure Windows 10 deployment, the authentication server may be tuned for SHA-2 based ciphers only and TLS 1.2.<\/p>\n<p><\/p>\n<p><strong>How to find out the supported 802.1X cipher suites of your clients<\/strong><\/p>\n<p>It&#8217;s not easy. In the best case your authentication can report this in a proper way. As for the ISE 2.4 I didn&#8217;t find a way to get a good overview report. However it&#8217;s listed in the authentication details of an endpoint.<\/p>\n<p>Another possibility is to capture RADIUS authentication packets somewhere between the authentication server and your authenticator. The desired information is inside the &#8220;Client Hello&#8221; messages, encapsulated in the RADIUS attribute 79 (EAP-Message) \/ SSL handshake.<\/p>\n<p>A corresponding Wireshark display filter for those messages could be:<\/p>\n<p><code>ssl.handshake.type == 2<\/code><\/p>\n<p>Probably it would be a good idea to create some kind of script, that analyzes captures and provide a proper summary report &#8230;<\/p>\n<\/div>\n<\/div>\n","protected":false},"excerpt":{"rendered":"<p>In many projects regarding network access control are focussing on probably secure EAP methods, which rely on SSL\/TLS. The most common examples are EAP-TLS or PEAP (simply because must supplicants support them). However, it&#8217;s not enough to check whether the authentication server or supplicant support the desired SSL\/TLS based EAP [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":446,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_post_was_ever_published":false},"categories":[1],"tags":[37,7,36,13,8],"class_list":["post-444","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-uncategorized","tag-ciphers","tag-dot1x","tag-eap","tag-ise","tag-security"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v27.5 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>EAP TLS ciphers - NetGab - The daily networking madness<\/title>\n<meta name=\"description\" content=\"Watch the cipher suites if using 802.1X with SSL\/TLS based EAP methods. Some clients may not support your server ciphers!\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/netgab.net\/web\/2019\/08\/08\/eap-tls-ciphers\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"EAP TLS ciphers - NetGab - The daily networking madness\" \/>\n<meta property=\"og:description\" content=\"Watch the cipher suites if using 802.1X with SSL\/TLS based EAP methods. Some clients may not support your server ciphers!\" \/>\n<meta property=\"og:url\" content=\"https:\/\/netgab.net\/web\/2019\/08\/08\/eap-tls-ciphers\/\" \/>\n<meta property=\"og:site_name\" content=\"NetGab - The daily networking madness\" \/>\n<meta property=\"article:published_time\" content=\"2019-08-08T14:38:55+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2022-01-26T06:04:16+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/netgab.net\/web\/wp-content\/uploads\/2019\/08\/rotor-cipher-machine-1147801_1280.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1280\" \/>\n\t<meta property=\"og:image:height\" content=\"853\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"joe\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"joe\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"2 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/netgab.net\\\/web\\\/2019\\\/08\\\/08\\\/eap-tls-ciphers\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/netgab.net\\\/web\\\/2019\\\/08\\\/08\\\/eap-tls-ciphers\\\/\"},\"author\":{\"name\":\"joe\",\"@id\":\"https:\\\/\\\/netgab.net\\\/web\\\/#\\\/schema\\\/person\\\/b3c8a779d0a772a9b047559d7bba4ccd\"},\"headline\":\"EAP TLS ciphers\",\"datePublished\":\"2019-08-08T14:38:55+00:00\",\"dateModified\":\"2022-01-26T06:04:16+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/netgab.net\\\/web\\\/2019\\\/08\\\/08\\\/eap-tls-ciphers\\\/\"},\"wordCount\":698,\"commentCount\":0,\"image\":{\"@id\":\"https:\\\/\\\/netgab.net\\\/web\\\/2019\\\/08\\\/08\\\/eap-tls-ciphers\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/netgab.net\\\/web\\\/wp-content\\\/uploads\\\/2019\\\/08\\\/rotor-cipher-machine-1147801_1280.jpg\",\"keywords\":[\"ciphers\",\"dot1x\",\"eap\",\"ise\",\"security\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/netgab.net\\\/web\\\/2019\\\/08\\\/08\\\/eap-tls-ciphers\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/netgab.net\\\/web\\\/2019\\\/08\\\/08\\\/eap-tls-ciphers\\\/\",\"url\":\"https:\\\/\\\/netgab.net\\\/web\\\/2019\\\/08\\\/08\\\/eap-tls-ciphers\\\/\",\"name\":\"EAP TLS ciphers - NetGab - The daily networking madness\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/netgab.net\\\/web\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/netgab.net\\\/web\\\/2019\\\/08\\\/08\\\/eap-tls-ciphers\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/netgab.net\\\/web\\\/2019\\\/08\\\/08\\\/eap-tls-ciphers\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/netgab.net\\\/web\\\/wp-content\\\/uploads\\\/2019\\\/08\\\/rotor-cipher-machine-1147801_1280.jpg\",\"datePublished\":\"2019-08-08T14:38:55+00:00\",\"dateModified\":\"2022-01-26T06:04:16+00:00\",\"author\":{\"@id\":\"https:\\\/\\\/netgab.net\\\/web\\\/#\\\/schema\\\/person\\\/b3c8a779d0a772a9b047559d7bba4ccd\"},\"description\":\"Watch the cipher suites if using 802.1X with SSL\\\/TLS based EAP methods. Some clients may not support your server ciphers!\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/netgab.net\\\/web\\\/2019\\\/08\\\/08\\\/eap-tls-ciphers\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/netgab.net\\\/web\\\/2019\\\/08\\\/08\\\/eap-tls-ciphers\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/netgab.net\\\/web\\\/2019\\\/08\\\/08\\\/eap-tls-ciphers\\\/#primaryimage\",\"url\":\"https:\\\/\\\/netgab.net\\\/web\\\/wp-content\\\/uploads\\\/2019\\\/08\\\/rotor-cipher-machine-1147801_1280.jpg\",\"contentUrl\":\"https:\\\/\\\/netgab.net\\\/web\\\/wp-content\\\/uploads\\\/2019\\\/08\\\/rotor-cipher-machine-1147801_1280.jpg\",\"width\":1280,\"height\":853},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/netgab.net\\\/web\\\/2019\\\/08\\\/08\\\/eap-tls-ciphers\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/netgab.net\\\/web\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"EAP TLS ciphers\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/netgab.net\\\/web\\\/#website\",\"url\":\"https:\\\/\\\/netgab.net\\\/web\\\/\",\"name\":\"NetGab - The daily networking madness\",\"description\":\"Networking at its best ... and worst\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/netgab.net\\\/web\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/netgab.net\\\/web\\\/#\\\/schema\\\/person\\\/b3c8a779d0a772a9b047559d7bba4ccd\",\"name\":\"joe\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/32b66c7321ea985e8c54f9975e87605df70ac5e4167a1e4153d91d72c67cf150?s=96&d=retro&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/32b66c7321ea985e8c54f9975e87605df70ac5e4167a1e4153d91d72c67cf150?s=96&d=retro&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/32b66c7321ea985e8c54f9975e87605df70ac5e4167a1e4153d91d72c67cf150?s=96&d=retro&r=g\",\"caption\":\"joe\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"EAP TLS ciphers - NetGab - The daily networking madness","description":"Watch the cipher suites if using 802.1X with SSL\/TLS based EAP methods. Some clients may not support your server ciphers!","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/netgab.net\/web\/2019\/08\/08\/eap-tls-ciphers\/","og_locale":"en_US","og_type":"article","og_title":"EAP TLS ciphers - NetGab - The daily networking madness","og_description":"Watch the cipher suites if using 802.1X with SSL\/TLS based EAP methods. Some clients may not support your server ciphers!","og_url":"https:\/\/netgab.net\/web\/2019\/08\/08\/eap-tls-ciphers\/","og_site_name":"NetGab - The daily networking madness","article_published_time":"2019-08-08T14:38:55+00:00","article_modified_time":"2022-01-26T06:04:16+00:00","og_image":[{"width":1280,"height":853,"url":"https:\/\/netgab.net\/web\/wp-content\/uploads\/2019\/08\/rotor-cipher-machine-1147801_1280.jpg","type":"image\/jpeg"}],"author":"joe","twitter_card":"summary_large_image","twitter_misc":{"Written by":"joe","Est. reading time":"2 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/netgab.net\/web\/2019\/08\/08\/eap-tls-ciphers\/#article","isPartOf":{"@id":"https:\/\/netgab.net\/web\/2019\/08\/08\/eap-tls-ciphers\/"},"author":{"name":"joe","@id":"https:\/\/netgab.net\/web\/#\/schema\/person\/b3c8a779d0a772a9b047559d7bba4ccd"},"headline":"EAP TLS ciphers","datePublished":"2019-08-08T14:38:55+00:00","dateModified":"2022-01-26T06:04:16+00:00","mainEntityOfPage":{"@id":"https:\/\/netgab.net\/web\/2019\/08\/08\/eap-tls-ciphers\/"},"wordCount":698,"commentCount":0,"image":{"@id":"https:\/\/netgab.net\/web\/2019\/08\/08\/eap-tls-ciphers\/#primaryimage"},"thumbnailUrl":"https:\/\/netgab.net\/web\/wp-content\/uploads\/2019\/08\/rotor-cipher-machine-1147801_1280.jpg","keywords":["ciphers","dot1x","eap","ise","security"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/netgab.net\/web\/2019\/08\/08\/eap-tls-ciphers\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/netgab.net\/web\/2019\/08\/08\/eap-tls-ciphers\/","url":"https:\/\/netgab.net\/web\/2019\/08\/08\/eap-tls-ciphers\/","name":"EAP TLS ciphers - NetGab - The daily networking madness","isPartOf":{"@id":"https:\/\/netgab.net\/web\/#website"},"primaryImageOfPage":{"@id":"https:\/\/netgab.net\/web\/2019\/08\/08\/eap-tls-ciphers\/#primaryimage"},"image":{"@id":"https:\/\/netgab.net\/web\/2019\/08\/08\/eap-tls-ciphers\/#primaryimage"},"thumbnailUrl":"https:\/\/netgab.net\/web\/wp-content\/uploads\/2019\/08\/rotor-cipher-machine-1147801_1280.jpg","datePublished":"2019-08-08T14:38:55+00:00","dateModified":"2022-01-26T06:04:16+00:00","author":{"@id":"https:\/\/netgab.net\/web\/#\/schema\/person\/b3c8a779d0a772a9b047559d7bba4ccd"},"description":"Watch the cipher suites if using 802.1X with SSL\/TLS based EAP methods. Some clients may not support your server ciphers!","breadcrumb":{"@id":"https:\/\/netgab.net\/web\/2019\/08\/08\/eap-tls-ciphers\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/netgab.net\/web\/2019\/08\/08\/eap-tls-ciphers\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/netgab.net\/web\/2019\/08\/08\/eap-tls-ciphers\/#primaryimage","url":"https:\/\/netgab.net\/web\/wp-content\/uploads\/2019\/08\/rotor-cipher-machine-1147801_1280.jpg","contentUrl":"https:\/\/netgab.net\/web\/wp-content\/uploads\/2019\/08\/rotor-cipher-machine-1147801_1280.jpg","width":1280,"height":853},{"@type":"BreadcrumbList","@id":"https:\/\/netgab.net\/web\/2019\/08\/08\/eap-tls-ciphers\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/netgab.net\/web\/"},{"@type":"ListItem","position":2,"name":"EAP TLS ciphers"}]},{"@type":"WebSite","@id":"https:\/\/netgab.net\/web\/#website","url":"https:\/\/netgab.net\/web\/","name":"NetGab - The daily networking madness","description":"Networking at its best ... and worst","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/netgab.net\/web\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/netgab.net\/web\/#\/schema\/person\/b3c8a779d0a772a9b047559d7bba4ccd","name":"joe","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/32b66c7321ea985e8c54f9975e87605df70ac5e4167a1e4153d91d72c67cf150?s=96&d=retro&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/32b66c7321ea985e8c54f9975e87605df70ac5e4167a1e4153d91d72c67cf150?s=96&d=retro&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/32b66c7321ea985e8c54f9975e87605df70ac5e4167a1e4153d91d72c67cf150?s=96&d=retro&r=g","caption":"joe"}}]}},"jetpack_featured_media_url":"https:\/\/netgab.net\/web\/wp-content\/uploads\/2019\/08\/rotor-cipher-machine-1147801_1280.jpg","jetpack_sharing_enabled":true,"jetpack_shortlink":"https:\/\/wp.me\/p8dgKr-7a","_links":{"self":[{"href":"https:\/\/netgab.net\/web\/wp-json\/wp\/v2\/posts\/444","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/netgab.net\/web\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/netgab.net\/web\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/netgab.net\/web\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/netgab.net\/web\/wp-json\/wp\/v2\/comments?post=444"}],"version-history":[{"count":11,"href":"https:\/\/netgab.net\/web\/wp-json\/wp\/v2\/posts\/444\/revisions"}],"predecessor-version":[{"id":938,"href":"https:\/\/netgab.net\/web\/wp-json\/wp\/v2\/posts\/444\/revisions\/938"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/netgab.net\/web\/wp-json\/wp\/v2\/media\/446"}],"wp:attachment":[{"href":"https:\/\/netgab.net\/web\/wp-json\/wp\/v2\/media?parent=444"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/netgab.net\/web\/wp-json\/wp\/v2\/categories?post=444"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/netgab.net\/web\/wp-json\/wp\/v2\/tags?post=444"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}