Summary: SSLv3 is an outdated and known broken security protocol. I'll remove the support from Gecko completely.
Bug: https://bugzilla.mozilla.org/show_bug.cgi?id=1106470 Spec: https://tools.ietf.org/html/draft-ietf-tls-sslv3-diediedie-00 Platform coverage: All Target release: Gecko 39. Chrome will also drop the support a few weeks later. Also, SSLv3 support will remain in ESR 38 and Thunderbird 38. Preference behind which this will be implemented: It is already disabled behind a preference by default since Gecko 34. -- [email protected] _______________________________________________ dev-platform mailing list [email protected] https://lists.mozilla.org/listinfo/dev-platform
