Processed: tagging 765347

2014-10-14 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org: > tags 765347 + pending Bug #765347 [apache2] Disable SSLv3 in default config Added tag(s) pending. > thanks Stopping processing here. Please contact me if you need assistance. -- 765347: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=765347 Deb

Bug#765347: Disable SSLv3 in default config

2014-10-14 Thread Arno Töll
For the records, we evaluated the market share of IE6. Several sources indicate it's in the < 0.1% range so that it sounds like a safe default to disable SSLv3. - http://www.w3schools.com/browsers/browsers_explorer.asp says - https://stats.wikimedia.org/wikimedia/squids/SquidReportClients.htm --

Bug#765347: Disable SSLv3 in default config

2014-10-14 Thread Thijs Kinkhorst
Package: apache2 Version: 2.4.10-5 Severity: wishlist Hi, The shipped mods-available/ssl.conf now contains: # The protocols to enable. # Available values: all, SSLv3, TLSv1, TLSv1.1, TLSv1.2 # SSL v2 is no longer supported SSLProtocol all I propose to chan