Thanks Kyle, I run into this in my news feed after I sent this. I just tested www.google.com <http://www.google.com/> and also scores a B.
There is probably some connection between Google’s own front end and GAE but I would like to hear from the GAE team what the plan is. I still think GAE should give more flexibility to the developer on how to configure SSL. > On Sep 19, 2015, at 9:27 PM, Kyle Finley <[email protected]> wrote: > > PK, > > It looks like this issue will be resolved soon. > > Disabling SSLv3 and RC4 > <http://googleonlinesecurity.blogspot.com/2015/09/disabling-sslv3-and-rc4.html> > > http://googleonlinesecurity.blogspot.com/2015/09/disabling-sslv3-and-rc4.html > > > [..] Because of these issues we expect to disable both SSLv3 and RC4 > > support at Google’s frontend servers and, over time, across our products in > > general, including Chrome, Android, our webcrawlers and our SMTP servers. > > Kyle > > On Friday, September 18, 2015 at 10:49:33 PM UTC-5, PK wrote: > This has been reported in this public tracker about a year and a half ago > (see issue 10783 > <https://code.google.com/p/googleappengine/issues/detail?id=10783>). Google > has acknowledged the issue there but has never offered an official response. > It makes conversations with customers about security difficult. Can somebody > respond here and/or the bug tracker what the plans are to make us look good > in this test and hopefully more secure? > > (Before somebody jumps to offer Cloudflare, I know that Cloudflare or some > other front end might be an option but I do not want to have traffic in the > clear between that front end and Google, so I want a fix from Google.) > > Thanks > > > > > > PK > [email protected] <javascript:> > > > > > > -- > You received this message because you are subscribed to the Google Groups > "Google App Engine" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to [email protected] > <mailto:[email protected]>. > To post to this group, send email to [email protected] > <mailto:[email protected]>. > Visit this group at http://groups.google.com/group/google-appengine > <http://groups.google.com/group/google-appengine>. > To view this discussion on the web visit > https://groups.google.com/d/msgid/google-appengine/10b1a641-4fc7-4765-9617-bee715218e4a%40googlegroups.com > > <https://groups.google.com/d/msgid/google-appengine/10b1a641-4fc7-4765-9617-bee715218e4a%40googlegroups.com?utm_medium=email&utm_source=footer>. > For more options, visit https://groups.google.com/d/optout > <https://groups.google.com/d/optout>. PK [email protected] -- You received this message because you are subscribed to the Google Groups "Google App Engine" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To post to this group, send email to [email protected]. Visit this group at http://groups.google.com/group/google-appengine. To view this discussion on the web visit https://groups.google.com/d/msgid/google-appengine/01EED301-1C6F-4B1A-9322-D1974C182838%40gae123.com. For more options, visit https://groups.google.com/d/optout.
