cURL / Mailing Lists / curl-library / Single Mail

curl-library

Re: SSLv3 fallback attack POODLE

From: Daniel Stenberg <daniel_at_haxx.se>
Date: Fri, 24 Oct 2014 13:44:59 +0200 (CEST)

On Fri, 24 Oct 2014, Kamil Dudka wrote:

> Is the plan to disable SSL 3.0 by default still valid?
>
> Are we going to make the change before the upcoming release?

Yes I think we should, if possible.

> Should I unimplement the fallback to SSL 3.0 in the NSS backend now, or wait
> till Ray's patch appears upstream?

I'm digging up Ray's patch just now and I've pushed it!

-- 
  / daniel.haxx.se
-------------------------------------------------------------------
List admin: http://cool.haxx.se/list/listinfo/curl-library
Etiquette:  http://curl.haxx.se/mail/etiquette.html
Received on 2014-10-24