Don't forget that SSL/TLS normally resists downgrade attacks -- but browsers use insecure fallback due to servers that don't properly handle the SSL handshake.

Don't forget that SSL/TLS normally resists downgrade attacks -- but browsers use insecure fallback due to servers that don't properly handle the SSL handshake. The whole purpose of TLS_FALLBACK_SCSV is just to re-enable the TLS downgrade resistence while retaining compatibility to those broken servers. I wonder what would effect more users - disabling SSLv3, or disabling insecure fallback?