News for hackers. Stuff that matters.

A comment on Show HN: SSL Decoder – An open-source alternative for the SSL Labs server test.

Re:Show HN: SSL Decoder – An open-source alternative for the... by carsonreinke on Thursday March 26, 2015 @03:30PM (#9272448)
Funny, looked up Gmail and they are still allowing SSL3
[ Parent | on HN ]
Re:Show HN: SSL Decoder – An open-source alternative for the... by bodyfour on Thursday March 26, 2015 @03:44PM (#9272534)
With browsers supporting TLS_FALLBACK_SCSV the SSL3 risk isn't that great since an MITM attack can't force a downgrade. Therefore SSL3 should only end up being used by old clients that don't support anything newer.

Organizations running such huge websites need to be conservative about dropping support -- even if it only bites 0.01% of users that can be a huge population!

[ Parent | on HN ]
Re:Show HN: SSL Decoder – An open-source alternative for the... by tracker1 on Thursday March 26, 2015 @03:52PM (#9272588)
Damn you IE8 and Android 2!!!
[ Parent | on HN ]