Re: How to disable SSL?
Michael Catanzaro <[email protected]>
| Newsgroups | gmane.comp.gnome.apps.epiphany |
|---|---|
| Organization | GNOME |
| Message-ID | <1413665662.32749.14.camel@lumiose-city> |
On Fri, 2014-10-17 at 12:03 +0000, Torben Andresen wrote:
> i think the most of you heard of the POODLE Attack. On many sites is
> now the note that Mozilla and Google will disable SSL(v3) in the
> near
> future and there are tips how to disable this manually by now. Is
> there any possibility to do this in Epihpany?
So after a bit more discussion with Dan Winship: Epiphany is indeed
vulnerable to POODLE [1]. The current plan is to disable SSLv3 in
WebKitGTK+, but this requires a software update. There is a workaround
[2] you can use to disable SSLv3 in the meantime, by starting Epiphany
from the command line like this:
G_TLS_GNUTLS_PRIORITY=${G_TLS_GNUTLS_PRIORITY:-NORMAL:%COMPAT:\!
VERS-SSL3.0} epiphany
[1] https://bugzilla.gnome.org/show_bug.cgi?id=738633#c15
[2] https://bugzilla.gnome.org/show_bug.cgi?id=738633#c4
_______________________________________________
epiphany-list mailing list
[email protected]
https://mail.gnome.org/mailman/listinfo/epiphany-list
signature.asc
(application/pgp-signature, 473 B)
-----BEGIN PGP SIGNATURE----- Version: GnuPG v2 iQEcBAABAgAGBQJUQtN+AAoJEH9xtkJ5NjKYf8AIAImP3tNajnKq8AEkxDvo2UNp cpctccouTOP40fZdnrgvkSln18Nd1TjAbiuD/+bxq4uItOauIXch2sCc7qrEgtnq XMO3krsfLigRsLEWnGAV3eMGFMVkM7C5e4b5IkVq1QFjVNBVTfuwuFOLcYJQfAw/ zL+021qHt7JctrUy27EoMWxFaROXPAD5OXREwDVVxMDZbJOZpPfEE4ckxBAwClm1 ihqGJKDj6HqvaCVmaP76m+o+rdbOA4FyxsNtXFiVvYLlWE+FRwUW4HSpDuIaeapg N+Q3LQ9o41rDil1Rtkotw/71TkHggkBSxJZ1LKACzo5XSd7xdJJzLisfKgt7xV4= =7jQM -----END PGP SIGNATURE-----