https://bugzilla.wikimedia.org/show_bug.cgi?id=72072

Andre Klapper <[email protected]> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
           Keywords|                            |ops
           Priority|Unprioritized               |High
            Summary|Disable SSL 3.0 on          |Disable SSL 3.0 on
                   |Wikimedia sites to mitigate |Wikimedia sites to mitigate
                   |POODLE attack               |POODLE attack
                   |                            |(CVE-2014-3566)

--- Comment #1 from Andre Klapper <[email protected]> ---
This topic is being discussed on the Operations mailing list now.

(In reply to chmarkine from comment #0)
> re-enable SSL 3.0 after TLS_FALLBACK_SCSV is available?

Quoting: "Google's TLS_FALLBACK_SCSV needs all clients and servers patched."

-- 
You are receiving this mail because:
You are the assignee for the bug.
You are on the CC list for the bug.
_______________________________________________
Wikibugs-l mailing list
[email protected]
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l

Reply via email to