-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Alexander Sack - Debian Bugmail wrote:
> yes, a security issue but not a blocker IMO. 

I agree. I'm still in the process of getting acquainted with the Debian BTS.

> Anyway, I will do some
> research on this. I don't remember exactly why mozilla decided not to
> switch this of by default in 1.5.

Thank you. I'm looking forward to finding out what reasoning may be
behind it.

I'll wait a couple more days before filing clones of this bug against
the other affected packages, which is probably only 'firefox'. Are there
other packages I should file this against? Do I correclty understand
that mozilla-thunderbird and mozilla-firefox are not affected by this as
they only provide versions which did not allow ssl2 by default?

Thanks,
Moritz
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.2.2 (GNU/Linux)

iD8DBQFETpxyn6GkvSd/BgwRAtSQAJ0QVtHX8bQJysTBnaPVH9+IzGlw0ACbBGeW
HIHfqqRPZVtkrOkFbz3gIZQ=
=hoMx
-----END PGP SIGNATURE-----


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to