Basically, it looks like this affects servers that still support SSLv2. From the mitigation notes: > To protect against DROWN, server operators need to ensure

Basically, it looks like this affects servers that still support SSLv2. From the mitigation notes: > To protect against DROWN, server operators need to ensure that their private keys are not used anywhere with server software that allows SSLv2 connections. Also, I like this snippet: > Disabling SSLv2 can be complicated and depends on the specific server software.