On Sat, 28 Jun 2014 20:05:21 +0200 Kurt Roeckx <[email protected]> wrote:
> If you make such a patch, I might disable SSLv3 support in Debian, > but that's unlikely to make it in jessie. The openssl configure script already has a disable-ssl3 option. I experimented with it a while back and it didn't have any impact. I'm also running my servers without sslv3 (although the openssl there still supports it, I just disable it in the software configurations). -- Hanno Böck http://hboeck.de/ mail/jabber: [email protected] GPG: BBB51E42
signature.asc
Description: PGP signature
