From owner-freebsd-gecko@FreeBSD.ORG  Wed Oct 15 14:54:15 2014
Return-Path: <owner-freebsd-gecko@FreeBSD.ORG>
Delivered-To: gecko@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [8.8.178.115])
 (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits))
 (No client certificate requested)
 by hub.freebsd.org (Postfix) with ESMTPS id ABFA9395;
 Wed, 15 Oct 2014 14:54:15 +0000 (UTC)
Received: from exodus.zi0r.com (exodus.zi0r.com [71.179.14.195])
 (using TLSv1 with cipher DHE-RSA-CAMELLIA256-SHA (256/256 bits))
 (Client CN "exodus.zi0r.com", Issuer "Gandi Standard SSL CA" (verified OK))
 by mx1.freebsd.org (Postfix) with ESMTPS id 7DB661C5;
 Wed, 15 Oct 2014 14:54:15 +0000 (UTC)
Received: from exodus.zi0r.com (localhost [127.0.0.1])
 by exodus.zi0r.com (Postfix) with ESMTP id CB4CF3A0D1;
 Wed, 15 Oct 2014 10:54:13 -0400 (EDT)
X-Virus-Scanned: amavisd-new at zi0r.com
Received: from exodus.zi0r.com ([127.0.0.1])
 by exodus.zi0r.com (exodus.zi0r.com [127.0.0.1]) (amavisd-new, port 10026)
 with LMTP id YgMz66SmfU_F; Wed, 15 Oct 2014 10:54:12 -0400 (EDT)
Received: from exodus.zi0r.com (syn.zi0r.com [71.179.14.194])
 (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
 (No client certificate requested)
 by exodus.zi0r.com (Postfix) with ESMTPSA id 3AE733A0C3;
 Wed, 15 Oct 2014 10:54:12 -0400 (EDT)
Date: Wed, 15 Oct 2014 10:54:10 -0400
From: Ryan Steinmetz <zi@FreeBSD.org>
To: Dag-Erling =?iso-8859-1?Q?Sm=F8rgrav?= <des@des.no>
Subject: Re: POODLE SSLv3 vulnerability
Message-ID: <20141015145410.GA79014@exodus.zi0r.com>
References: <86iojmgn40.fsf@nine.des.no>
 <20141015020813.GA5814@exodus.zi0r.com>
 <86siipg4v8.fsf@nine.des.no>
MIME-Version: 1.0
Content-Type: text/plain; charset=iso-8859-1; format=flowed
Content-Disposition: inline
In-Reply-To: <86siipg4v8.fsf@nine.des.no>
User-Agent: Mutt/1.5.23 (2014-03-12)
Content-Transfer-Encoding: quoted-printable
Cc: gecko@freebsd.org, ports-secteam@freebsd.org, chromium@freebsd.org
X-BeenThere: freebsd-gecko@freebsd.org
X-Mailman-Version: 2.1.18-1
Precedence: list
List-Id: Gecko Rendering Engine issues <freebsd-gecko.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/options/freebsd-gecko>,
 <mailto:freebsd-gecko-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-gecko/>
List-Post: <mailto:freebsd-gecko@freebsd.org>
List-Help: <mailto:freebsd-gecko-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-gecko>,
 <mailto:freebsd-gecko-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Wed, 15 Oct 2014 14:54:15 -0000


On (10/15/14 09:38), Dag-Erling Sm=F8rgrav wrote:
>Ryan Steinmetz <zi@FreeBSD.org> writes:
>> It might be less surprising if we bundle the addon with the current
>> installation.
>
>I disagree.  The change I proposed is simple and unobtrusive.  Please
>consider this a formal request from the Security Officer.

I do not have a way to test the patch.  Will try to locate someone who
can.

-r

>
>DES
>--=20
>Dag-Erling Sm=F8rgrav - des@des.no



--=20
Ryan Steinmetz
PGP: 9079 51A3 34EF 0CD4 F228  EDC6 1EF8 BA6B D028 46D7