[squid-dev] Death of SSLv3

Thu May 7 14:33:09 UTC 2015

On 05/07/2015 04:03 AM, Amos Jeffries wrote:
> Its done. SSLv3 is now a "MUST NOT use" protocol from RFC 7525
> 
> It's time for us to start ripping out from trunk all features and hacks
> supporting its use.

No, it is not time yet. Too many folks still use SSL and cannot switch
to TLS just because a "best current practice" document recommends that
they do. User needs trump RFC compliance in this case.

Alex.