[squid-dev] Death of SSLv3
rousskov at measurement-factory.com
Thu May 7 14:33:09 UTC 2015
On 05/07/2015 04:03 AM, Amos Jeffries wrote:
> Its done. SSLv3 is now a "MUST NOT use" protocol from RFC 7525
> It's time for us to start ripping out from trunk all features and hacks
> supporting its use.
No, it is not time yet. Too many folks still use SSL and cannot switch
to TLS just because a "best current practice" document recommends that
they do. User needs trump RFC compliance in this case.
More information about the squid-dev