PlaneShift

Fan Area => The Hydlaa Plaza => Topic started by: LigH on October 15, 2014, 04:05:01 pm

Title: Google found the POODLE in SSL 3
Post by: LigH on October 15, 2014, 04:05:01 pm

Sounds funny, but isn't: "Legacy" secure connections in web browsers via SSL are no more secure. The last version before the new TLS protocol, SSL v3.0, is now officially broken by all means.

You should try to set up your browser not to fall back to SSL3 anymore, but insist in at least TLS 1.0 for https connections. Details here (https://zmap.io/sslv3/).

Google Online Security Blog (http://googleonlinesecurity.blogspot.co.uk/2014/10/this-poodle-bites-exploiting-ssl-30.html)

Title: Re: Google found the POODLE in SSL 3
Post by: bilbous on October 15, 2014, 08:49:33 pm

ssl3 is 15 years old so...you shouldn't have been accepting them anyway.