-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Alexander Sack - Debian Bugmail wrote: > yes, a security issue but not a blocker IMO.
I agree. I'm still in the process of getting acquainted with the Debian BTS. > Anyway, I will do some > research on this. I don't remember exactly why mozilla decided not to > switch this of by default in 1.5. Thank you. I'm looking forward to finding out what reasoning may be behind it. I'll wait a couple more days before filing clones of this bug against the other affected packages, which is probably only 'firefox'. Are there other packages I should file this against? Do I correclty understand that mozilla-thunderbird and mozilla-firefox are not affected by this as they only provide versions which did not allow ssl2 by default? Thanks, Moritz -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.2.2 (GNU/Linux) iD8DBQFETpxyn6GkvSd/BgwRAtSQAJ0QVtHX8bQJysTBnaPVH9+IzGlw0ACbBGeW HIHfqqRPZVtkrOkFbz3gIZQ= =hoMx -----END PGP SIGNATURE----- -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]