Gmail Disabling RC4 and SSLv3 SMTP Support

Re:Gmail Disabling RC4 and SSLv3 SMTP Support by yuhong on Thursday May 19, 2016 @03:23PM (#11732988)

If you are on Windows Server 2003, install https://technet.microsoft.com/en-us/library/security/ms10-02... with /b:SP2QFE, otherwise your mail server may stop working. (Yes, installing https://support.microsoft.com/en-us/kb/957047 should do this for you, but this is safer especially considering how Server 2003 don't use CBS servicing)

[ Parent | on HN ]

Re:Gmail Disabling RC4 and SSLv3 SMTP Support by aexaey on Thursday May 19, 2016 @03:50PM (#11733182)

Thank you for mentioning this. I was really struggling to understand reasons for not dropping SSL3 much, much earlier.

[ Parent | on HN ]

Re:Gmail Disabling RC4 and SSLv3 SMTP Support by gram657 on Thursday May 19, 2016 @04:30PM (#11733549)

I guess google's first move was to start identifying mail sent in cleartext with the unlocked red padlock symbol. That was in February 2016. This is stage 2.

[ Parent | on HN ]

Re:Gmail Disabling RC4 and SSLv3 SMTP Support by yuhong on Thursday May 19, 2016 @07:03PM (#11734538)

This is not about SSLv3, this is about CBC ciphersuites. But yes I should mention that IBM Domino used to be SSLv3 only.

[ Parent | on HN ]