The POODLE bites again

Re:The POODLE bites again by resonantcore on Monday December 08, 2014 @06:26PM (#8719939)

We look forward to TLS 1.2 support being the norm. (And then, hopefully, the ratification and adoption of TLS 1.3)

A 50% adoption rate is excellent news. Still a long way to go, but that's worth toasting over.

[ Parent | on HN ]

Re:The POODLE bites again by yuhong on Monday December 08, 2014 @06:31PM (#8719959)

What is frustrating is how many such servers have TLS 1.3 intolerance (even PayPal), and often the same servers are also affected by this bug. I wonder what TLS implementation is this.

[ Parent | on HN ]

Re:The POODLE bites again by feld on Monday December 08, 2014 @10:27PM (#8720840)

TLS 1.3 isn't finished yet...

[ Parent | on HN ]

Re:The POODLE bites again by yuhong on Monday December 08, 2014 @10:45PM (#8720901)

I know, the goal is to prepare.

[ Parent | on HN ]

Re:The POODLE bites again by feld on Tuesday December 09, 2014 @08:29AM (#8722558)

I'm not sure what you mean then by servers having TLS 1.3 intolerance.

[ Parent | on HN ]

Re:The POODLE bites again by yuhong on Tuesday December 09, 2014 @05:44PM (#8726369)

It does not respond properly to clients trying to negotiate TLS 1.3. It should return a ServerHello showing the supported TLS 1.2 version.

[ Parent | on HN ]

Re:The POODLE bites again by feld on Friday December 12, 2014 @08:55AM (#8739966)

I wasn't aware there was a TLS 1.3 PoC that people could use for testing.

[ Parent | on HN ]

Re:The POODLE bites again by yuhong on Friday December 12, 2014 @03:47PM (#8742600)

It is as simple as setting the version in the ClientHello message.

[ Parent | on HN ]

Re:The POODLE bites again by feld on Saturday December 13, 2014 @12:43PM (#8745718)

Oh, I see

[ Parent | on HN ]