Is Pidgin vulnerable to the POODLE SSLv3 vulnerability?
I know that Pidgin doesn't offer a way to disable SSLv3 support, so I'm specifically interested in whether Pidgin is suseptible to a TLS/SSL downgrade attack?
Does Pidgin retry failed connections with lower SSL/TLS protocol versions?
Does Pidgin support TLS_FALLBACK_SCSV?
Lois
_______________________________________________ Support@pidgin.im mailing list Want to unsubscribe? Use this link: https://pidgin.im/cgi-bin/mailman/listinfo/support
