Re: Re: shouldnt SSLv2 be disabled by default, mk_ca_bundle and install question

2016-09-16 Thread vinayak
My availability will be limited until Aug 25. I will respond to your email as soon as I can. --- List admin: https://cool.haxx.se/list/listinfo/curl-library Etiquette: https://curl.haxx.se/mail/etiquette.html

Re: shouldnt SSLv2 be disabled by default, mk_ca_bundle and install question

2016-09-16 Thread Ray Satiro via curl-library
On 9/16/2016 6:14 PM, Daniel Stenberg wrote: On Fri, 16 Sep 2016, Michael Felt wrote: So, this time I watched a bit more closely re: SSL - my comment is: shouldn't SSLv2 just be removed regardless if OpenSSL is (still) supporting it? Yes it should. In fact SSLv3 should also probably be disab

Re: shouldnt SSLv2 be disabled by default, mk_ca_bundle and install question

2016-09-16 Thread Daniel Stenberg
On Fri, 16 Sep 2016, Michael Felt wrote: So, this time I watched a bit more closely re: SSL - my comment is: shouldn't SSLv2 just be removed regardless if OpenSSL is (still) supporting it? Yes it should. In fact SSLv3 should also probably be disabled by default, but then we also know that we