Thanks. >If you use HTTP "http://" you are not using SSL/TLS. You are not >affected by POODLE, but also not using encryption.
We are using HTTP so we are not affected by POODLE. >If using SSH/TLS, the server does not use serf. Turn off SSL 3.0 in the >Apache httpd configuration. No upgrade required, simple configuration >change. Can you tell when SSH/TLS is used ? In my case we are using HTTP protocol. How can I disable SSL 3.0 in Apache conf ? Regards Mohsin -- View this message in context: http://subversion.1072662.n5.nabble.com/SSL-V3-Vulnerability-in-HTTP-Repository-Access-tp190716p190719.html Sent from the Subversion Users mailing list archive at Nabble.com.