[ic] POODLE
Jon Jensen
jon at endpoint.com
Sun Nov 2 03:06:13 UTC 2014
On Sun, 2 Nov 2014, Peter wrote:
> I'm thinking that it would be a good idea to update the payment modules
> in Interchange so that they will not use SSLv2 (BEAST) or SSLv3 (POODLE)
> protocols. This is probably not an issue because the payment processors
> have, or will likely soon be removing SSLv3 support from their servers,
> but still it's probably a good idea to donk the issue from our end as
> well.
+1. Are you already working on a patch? Want any help?
BTW, BEAST is not related to SSLv2. SSLv2 was broken and dead many years
before BEAST, and BEAST still affects TLS 1.0. FWIW.
Jon
--
Jon Jensen
End Point Corporation
https://www.endpoint.com/
More information about the interchange-users
mailing list