Re: [Pound Mailing List] Poodle Exploit
Joe Gooch <[email protected]>
| Newsgroups | gmane.comp.web.pound.general |
|---|---|
| Message-ID | <[email protected]> |
That would fall on OpenSSL to implement... Which they did... A patch went out yesterday. It's doubtful many distros have it yet. Once the library supports it we can. I plan on whipping up a disablesslv3 option in the next couple days... I can do something similar with fallback scsv at that time. Joe On 10/15/14, 4:55 PM, Root Kev wrote: Hello, Is there any known way to implement the "TLS_FALLBACK_SCSV<https://tools.ietf.org/html/draft-ietf-tls-downgrade-scsv-00>" feature in pound? Thanks, Kevin