Package: gnutls28
Version: 3.3.8-4
Severity: important
Tags: security

Hi,

Can SSLv3 be disabled in our GnuTLS build please?

As a reference, OpenSSL disabled this in jessie and sid:
https://packages.qa.debian.org/o/openssl/news/20141015T180434Z.html

It would be good for security and consistency if GnuTLS would also adopt this
approach and disable the legacy protocol in jessie and sid.


Cheers,
Thijs

_______________________________________________
Secure-testing-team mailing list
[email protected]
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/secure-testing-team

Reply via email to