Thread: poodle - Padding Oracle On Downgraded Legacy Encryption SSL vulnerability
View Single Post
Old 10-29-2014, 11:23 PM   #18
bookmarked
Addict
bookmarked ought to be getting tired of karma fortunes by now.bookmarked ought to be getting tired of karma fortunes by now.bookmarked ought to be getting tired of karma fortunes by now.bookmarked ought to be getting tired of karma fortunes by now.bookmarked ought to be getting tired of karma fortunes by now.bookmarked ought to be getting tired of karma fortunes by now.bookmarked ought to be getting tired of karma fortunes by now.bookmarked ought to be getting tired of karma fortunes by now.bookmarked ought to be getting tired of karma fortunes by now.bookmarked ought to be getting tired of karma fortunes by now.bookmarked ought to be getting tired of karma fortunes by now.
 
Posts: 374
Karma: 6405689
Join Date: Nov 2012
Location: US
Device: Kindle 4 NT, Paperwhite
Quote:
Originally Posted by rollei View Post


Does anyone know what should the values of security.tls.version.max and security.tls.version.min be?

I presently have the following:

security.tls.version.max = 3
security.tls.version.min = 0

What should I set the max and min values to?
You only need to change the min value to 1.
Detailed instructions related to POODLE https://scotthelme.co.uk/sslv3-goes-...-off-protocol/
Reference info http://kb.mozillazine.org/Security.tls.version.*
bookmarked is offline   Reply With Quote