On 22/10/14 21:02, Patrick Walters wrote:
> Hello,
>
> I'm sure as many of you are aware, the POODLE exploit is making it's way
> around the news pages.
>
> Is there a way to automatically configure Firefox and / or Chrome to use
> TLS1.0 or higher? That would mitigate the vulnerability on the user
> end. It's not feasible to have users, particularly students go through
> the settings and do it manually.
>
> We are running LTSP on Ubuntu 12.04 with mixed thin and fat clients.
I haven't tried it in LTSP, but it should work everywhere. Create a file
custom.js or however you want to call it in
[$chroot]/usr/lib/firefox/defaults/pref with the following content
lockpref("security.tls.version.min", 1);
HTH
Thomas
------------------------------------------------------------------------------
_____________________________________________________________________
Ltsp-discuss mailing list. To un-subscribe, or change prefs, goto:
https://lists.sourceforge.net/lists/listinfo/ltsp-discuss
For additional LTSP help, try #ltsp channel on irc.freenode.net