4 ms·

Funny, looked up Gmail and they are still allowing SSL3

• bodyfour 12y ago
  With browsers supporting TLS_FALLBACK_SCSV the SSL3 risk isn't that great since an MITM attack can't force a downgrade. Therefore SSL3 should only end up being used by old clients that don't support anything newer. Organizations running such huge websites need to be conservative about dropping support -- even if it only bites 0.01% of users that can be a huge population!
  • tracker1 12y ago
    Damn you IE8 and Android 2!!!