Thread: poodle - Padding Oracle On Downgraded Legacy Encryption SSL vulnerability
View Single Post
Old 10-29-2014, 10:34 PM   #5
rollei
Addict
rollei ought to be getting tired of karma fortunes by now.rollei ought to be getting tired of karma fortunes by now.rollei ought to be getting tired of karma fortunes by now.rollei ought to be getting tired of karma fortunes by now.rollei ought to be getting tired of karma fortunes by now.rollei ought to be getting tired of karma fortunes by now.rollei ought to be getting tired of karma fortunes by now.rollei ought to be getting tired of karma fortunes by now.rollei ought to be getting tired of karma fortunes by now.rollei ought to be getting tired of karma fortunes by now.rollei ought to be getting tired of karma fortunes by now.
 
Posts: 219
Karma: 1000210
Join Date: Mar 2014
Device: Kobo
Quote:
Originally Posted by eschwartz View Post
FF 33.0.2 is vulnerable, Mozilla will disable SSLv3.0 in FF34.
That's what I thought. Mozilla disabling SSLv3.0 in FF34 which will be released Nov 25.

https://blog.mozilla.org/security/20...nd-of-ssl-3-0/

But when I run poodletest.com, the results are not vulnerable for Firefox 33.0.2. Poodletest.com reported "your browser doesn't support SSLv3, or only supports SSLv3 using stream ciphers". See pic.

Did you think poodletest.com is inaccurate?
rollei is offline   Reply With Quote