Subject: Re: [Uta] TLS BCP Review

From: Peter Gutmann <[email-masked]>
Date: Thu, 24 Jul 2014 02:10:23 +0000

Bodo Moeller <[email-masked]> writes:

>Additional points:

Additionalerer points:

- Does anyone have any data on what happens currently if you disable SSL 3.0,
i.e. make the minimum version your software will fall back to TLS 1.0?  I've
been tempted to do this for my next code release (the #ifdef's have been in
the code for awhile now), but it's a bit of a chicken-and-egg thing, I won't
know what will happen until I go ahead and do it.

Peter.