[arch-general] Heads up: If you are using SSLv2 turn it off immediately
archlist at fratti.ch
Thu Mar 3 07:37:06 UTC 2016
On 01/03/16 23:23, P. A. López-Valencia wrote:
> The vulnerability is so bad, it doesn't only have a CVE number,
> CVE-2016-0800, but a name and its own website: HTTPS DROWN.
Just as many other vulnerabilities these days, there is a marketing
campaign behind them, probably to sell consultancy services.
Anybody who's security-minded hasn't been using SSLv2 anyway.
-------------- next part --------------
A non-text attachment was scrubbed...
Size: 819 bytes
Desc: OpenPGP digital signature
More information about the arch-general