Re:This POODLE bites: exploiting the SSL 3.0 fallback
by paulannesley on Tuesday October 14, 2014 @10:16PM
(#8456877)
Sounds right, and I think that's covered by this:
> Disabling SSL 3.0 support, or CBC-mode ciphers with SSL 3.0, is sufficient to mitigate this issue, but presents significant compatibility problems, even today.
> Disabling SSL 3.0 support, or CBC-mode ciphers with SSL 3.0, is sufficient to mitigate this issue, but presents significant compatibility problems, even today.