Finished battling through webservers, imap servers and smtp servers for SSLv3 disablement. Bleurgh.
Oct 15, 2014 ยท 10:55 AM UTC
2
@dpashley The issue was working out what the runes should be for each service, after than it was edit and git push :-)
@dpashley As for how bad it is, basically you can MITM and read any SSLv3 convo with very little effort.
@dsilverstone on webserver setup I just followed the guidelines on bettercrypto.org, which doesn't include SSLv2 or v3
2
@motters Does it cover Cherokee?
1
@dsilverstone Yet another reason we should burn anyone using a web browser over 2 years old.