subject:"TLS_FALLBACK_SCSV"

Re: TLS_FALLBACK_SCSV

2014-10-17 Thread Dewangga Bachrul Alam

ue, I've disable SSLv3 on `ssl_protocols` > > thats the most important part > > >> directive. But, ssllabs.com says that : >> >> snip >> Downgrade attack prevention No, TLS_FALLBACK_SCSV not supported (more >> info[2]) > > TLS_FA

Re: TLS_FALLBACK_SCSV

2014-10-17 Thread mex

> Regarding POODLEbleed[1] issue, I've disable SSLv3 on `ssl_protocols` thats the most important part > directive. But, ssllabs.com says that : > > snip > Downgrade attack prevention No, TLS_FALLBACK_SCSV not supported (more > info[2]) TLS_FALLBACK_SCSV a

TLS_FALLBACK_SCSV

2014-10-17 Thread Dewangga Bachrul Alam

Hi there, Regarding POODLEbleed[1] issue, I've disable SSLv3 on `ssl_protocols` directive. But, ssllabs.com says that : snip Downgrade attack prevention No, TLS_FALLBACK_SCSV not supported (more info[2]) snip But on LiteSpeed[3] configuration, it says yes.