On 22/10/14 21:02, Patrick Walters wrote:
> Hello,
> 
> I'm sure as many of you are aware, the POODLE exploit is making it's way
> around the news pages.  
> 
> Is there a way to automatically configure Firefox and / or Chrome to use
> TLS1.0 or higher?  That would mitigate the vulnerability on the user
> end.  It's not feasible to have users, particularly students go through
> the settings and do it manually.
> 
> We are running LTSP on Ubuntu 12.04 with mixed thin and fat clients.

I haven't tried it in LTSP, but it should work everywhere. Create a file
custom.js or however you want to call it in
[$chroot]/usr/lib/firefox/defaults/pref with the following content

lockpref("security.tls.version.min", 1);

HTH
Thomas

------------------------------------------------------------------------------
_____________________________________________________________________
Ltsp-discuss mailing list.   To un-subscribe, or change prefs, goto:
      https://lists.sourceforge.net/lists/listinfo/ltsp-discuss
For additional LTSP help,   try #ltsp channel on irc.freenode.net

Reply via email to