On Fri, 24 Oct 2014, Kamil Dudka wrote:

Is the plan to disable SSL 3.0 by default still valid?

Are we going to make the change before the upcoming release?

Yes I think we should, if possible.

Should I unimplement the fallback to SSL 3.0 in the NSS backend now, or wait till Ray's patch appears upstream?

I'm digging up Ray's patch just now and I've pushed it!

--

 / daniel.haxx.se
-------------------------------------------------------------------
List admin: http://cool.haxx.se/list/listinfo/curl-library
Etiquette:  http://curl.haxx.se/mail/etiquette.html

Reply via email to