News for hackers. Stuff that matters.

A comment on This POODLE bites: exploiting the SSL 3.0 fallback. Parent comment

Re:This POODLE bites: exploiting the SSL 3.0 fallback by krakensden on Tuesday October 14, 2014 @11:37PM (#8457062)
> The TLS_FALLBACK_SCSV will prevent downgrade attacks

And it's only implemented by boringssl, ie, Google Chrome and Google's web servers?

[ Parent | on HN ]
Re:This POODLE bites: exploiting the SSL 3.0 fallback by brians on Wednesday October 15, 2014 @12:10AM (#8457119)
It's independently in others servers as well. No idea on clients yet.
[ Parent | on HN ]
Re:This POODLE bites: exploiting the SSL 3.0 fallback by wonsler on Wednesday October 15, 2014 @12:31AM (#8457181)
See https://github.com/yahoo/cnet for a client that uses BoringSSL
[ Parent | on HN ]