[OpenIndiana-discuss] SSL 3 POODLE security bug

[Thorsten Heit]

Alan Coopersmith <alan.coopersmith at oracle.com> schrieb am 16.10.2014 
18:18:33:

> Von: Alan Coopersmith <alan.coopersmith at oracle.com>
> An: Fred Kimball <choope1 at yahoo.com>, Discussion list for 
> OpenIndiana <openindiana-discuss at openindiana.org>
> Datum: 16.10.2014 18:19
> Betreff: Re: [OpenIndiana-discuss] SSL 3 POODLE security bug
> 
> On 10/16/14 08:08 AM, Fred Kimball via openindiana-discuss wrote:
> > A post in the Mozilla blog suggested to disable SSL by going to 
> about:config.
> 
> If you're using Firefox 20 or newer, it's easier to use the new add-on
> Mozilla has released for this:
> https://addons.mozilla.org/en-US/firefox/addon/ssl-version-control/

Without the installation of a plugin:
Go to "about:config" and set "security.tls.version.min" to "1" (default: 
0)

See http://kb.mozillazine.org/Security.tls.version.*



Regards

Thorsten