oss-sec mailing list archives

Re: Truly scary SSL 3.0 vuln to be revealed soon:

From: Hanno Böck <hanno () hboeck de>
Date: Wed, 15 Oct 2014 00:41:06 +0200

It's out:

https://www.openssl.org/~bodo/ssl-poodle.pdf
http://googleonlinesecurity.blogspot.de/2014/10/this-poodle-bites-exploiting-ssl-30.html

My conclusion stays the same: Disable SSLv3.

-- 
Hanno Böck
http://hboeck.de/

mail/jabber: hanno () hboeck de
GPG: BBB51E42

Attachment: signature.asc
Description:

Current thread:

Truly scary SSL 3.0 vuln to be revealed soon: Sona Sarmadi (Oct 14)
- Re: Truly scary SSL 3.0 vuln to be revealed soon: Hanno Böck (Oct 14)
  - Re: Truly scary SSL 3.0 vuln to be revealed soon: Reed Loden (Oct 14)
    - Re: Truly scary SSL 3.0 vuln to be revealed soon: Alex Gaynor (Oct 14)
    - Re: Truly scary SSL 3.0 vuln to be revealed soon: Reed Loden (Oct 14)
- Re: Truly scary SSL 3.0 vuln to be revealed soon: Hanno Böck (Oct 14)
  - RE: Truly scary SSL 3.0 vuln to be revealed soon: Sona Sarmadi (Oct 14)
    - Re: Truly scary SSL 3.0 vuln to be revealed soon: Walter Parker (Oct 14)
    - Re: Truly scary SSL 3.0 vuln to be revealed soon: Brandon Whaley (Oct 15)
    - list policy (Re: Truly scary SSL 3.0 vuln to be revealed soon:) Solar Designer (Oct 15)
    - Re: list policy (Re: Truly scary SSL 3.0 vuln to be revealed soon:) Alexander Cherepanov (Oct 28)
    - Re: list policy (Re: Truly scary SSL 3.0 vuln to be revealed soon:) Kurt Seifried (Oct 28)
    - Re: list policy (Re: Truly scary SSL 3.0 vuln to be revealed soon:) Alexander Cherepanov (Oct 28)
    - Re: list policy (Re: Truly scary SSL 3.0 vuln to be revealed soon:) Kurt Seifried (Oct 28)
    - Re: list policy (Re: Truly scary SSL 3.0 vuln to be revealed soon:) Michal Zalewski (Oct 29)
    - Re: list policy (Re: Truly scary SSL 3.0 vuln to be revealed soon:) Dave Horsfall (Oct 29)

(Thread continues...)