Hacker News
new
|
past
|
comments
|
ask
|
show
|
jobs
|
submit
login
D4AHNGM
on April 25, 2015
|
parent
|
context
|
favorite
| on:
Today is Debian 8 release day
Minor highlight: Debian 8 ships with an OpenSSL which has SSLv3 disabled at compile-time.
gcr
on April 25, 2015
[–]
Do you mean that only TLS is supported now?
D4AHNGM
on April 25, 2015
|
parent
|
next
[–]
Aye. The Debian compile rules for Jessie's OpenSSL include "no-ssl2 no-ssl3 no-ssl3-method" so it's just TLS1.0 onwards available.
ben_bai
on April 26, 2015
|
parent
|
prev
[–]
SSLv3 is so 1996... Please, please, please with sugar on top, use TLS only. Also there are lots of changes in the software world in the last 20 years, which the SSL codebase didn't keep up with (mainly meaning OpenSSL).
Guidelines
|
FAQ
|
Lists
|
API
|
Security
|
Legal
|
Apply to YC
|
Contact
Search:
