The SSLv3 vulnerability(POODLE) – fix and explanation
POODLE (Padding Oracle On Downgraded Legacy Encryption.) is in the news these days, and the fix for it is the following: Internet Storm Center link and the important parts: Apache: Add -SSLv3 to the “SSLProtocol” line. It should already contain -SSLv2 unless you list specific protocols. nginx: list specific allowed protocols in the “ssl_protocols” line. … Read more