On 27.02.2017 13:03, Akshar Kanak wrote:
Dear Team
In https://en.wikipedia.org/wiki/POODLE , It is mentioned that
POODLE attack is possible aganist *TLS *also . has this issue been
alredy addressed in openssl .
Thanks and regards
Akshar
As the corresponding section in the Wikipedia article says that is not a
flaw in the TLS protocol but a flaw in it's implementations, more
exactly in the implementation of CBC encryption mode. For being on the
safe side take cipher suites not using CBC mode.
Best regards,
Richard
--
openssl-users mailing list
To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-users
