Quote:
Originally Posted by eschwartz
Yes.
In general these sort of tests are better for proving the presence of vulnerabilities, because if you are vulnerable once you can and will be again.
However, saying you aren't vulnerable... is it because you truly are protected, or because anything down to a random glitch prevented the connection going through and thus fooled the test?
I remember the same confusion wih the Heartbleed tests, but at least those warned you of the uncertainty.
|
That poodletest.com may not be accurate, I ran a test from SSL labs and got a vulnerable status.
SSL Labs link to test Poodle vulnerability:
https://www.ssllabs.com/ssltest/viewMyClient.html
