• Visitors can check out the Forum FAQ by clicking this link. You have to register before you can post: click the REGISTER link above to proceed. To start viewing messages, select the forum that you want to visit from the selection below. View our Forum Privacy Policy.
  • Want to receive the latest contracting news and advice straight to your inbox? Sign up to the ContractorUK newsletter here. Every sign up will also be entered into a draw to WIN £100 Amazon vouchers!

IETF Finally takes SSL 3.0 out behind the shed and shoots it.

Collapse
X
  •  
  • Filter
  • Time
  • Show
Clear All
new posts

    IETF Finally takes SSL 3.0 out behind the shed and shoots it.

    https://tools.ietf.org/html/rfc7568

    Points of note:

    Originally posted by IETF
    The Secure Sockets Layer version 3.0 (SSLv3), as specified in RFC
    6101, is not sufficiently secure. This document requires that SSLv3
    not be used.
    Originally posted by IETF
    3. Do Not Use SSL Version 3.0

    SSLv3 MUST NOT be used. Negotiation of SSLv3 from any version of TLS
    MUST NOT be permitted.
    Originally posted by IETF
    4. SSLv3 Is Comprehensively Broken
    "Being nice costs nothing and sometimes gets you extra bacon" - Pondlife.

Working...
X