Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 10 Sep 2013 14:09:51 -0500
From:      Mark Felder <feld@FreeBSD.org>
To:        Darren Pilgrim <list_freebsd@bluerosetech.com>
Cc:        freebsd-security@freebsd.org
Subject:   Re: Anything in this story of concern?
Message-ID:  <1378840191.3555.20332769.2FCAFF2D@webmail.messagingengine.com>
In-Reply-To: <522F6D79.9070208@bluerosetech.com>
References:  <20130909144142.J99094@sola.nimnet.asn.au> <1378731079.24879.19687157.0DBE99D1@webmail.messagingengine.com> <522F6D79.9070208@bluerosetech.com>

next in thread | previous in thread | raw e-mail | index | archive | help
On Tue, Sep 10, 2013, at 14:05, Darren Pilgrim wrote:
> - Leave SSLv3/TLSv1.0 enabled only for cases where you can't control the 
> remote end's SSL capabilities.

Which is what I routinely run into: public webhosting services.

Customers will scream if their website doesn't work on every moderately
reasonable device/browser.

*sigh* you can't win in this game



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?1378840191.3555.20332769.2FCAFF2D>