SSLv3 attack on pop3?

2014-10-31 Thread Hans Morten Kind
We turned off SSLv3 support on our pop/imap running dovecot on Oct 16th, we did check that all users where using TLSv1 and there have been no complaints (except one old windows-phone). But at 13:00 UTC today, suddenly strange entries is seen in the logfile: Error: SSL: Stacked error:

Re: SSLv3 attack on pop3?

2014-10-31 Thread Charles Marcus
On 10/31/2014 3:02 PM, Hans Morten Kind k...@adm.uib.no wrote: We turned off SSLv3 support on our pop/imap running dovecot on Oct 16th, we did check that all users where using TLSv1 and there have been no complaints (except one old windows-phone). But at 13:00 UTC today, suddenly strange

Re: SSLv3 attack on pop3?

2014-10-31 Thread Hans Morten Kind
On Fri, Oct 31, 2014 at 03:47:33PM -0400, Charles Marcus wrote: On 10/31/2014 3:02 PM, Hans Morten Kind k...@adm.uib.no wrote: This makes me anxious that some have made some poodle-like thing for pop3? Can you show full log entries? There is much more to show, but have a peek on port 995