Archives
Archives
| From: | Michael Orlitzky <mjo@g.o> | ||
|---|---|---|---|
| To: | gentoo-user@l.g.o | ||
| Subject: | Re: [gentoo-user] disable SSLv3 in apache2? | ||
| Date: | Tue, 12 Aug 2014 00:38:26 | ||
| Message-Id: | 53E96201.5080805@gentoo.org | ||
| In Reply to: | Re: [gentoo-user] disable SSLv3 in apache2? by Grant |
||
| 1 | On 08/10/2014 11:01 AM, Grant wrote: |
| 2 | >>> I recently upgraded from apache-2.2.27 to apache-2.2.27-r4 and |
| 3 | >>> etc-update wanted to add the following directive to the default SSL |
| 4 | >>> vhost: |
| 5 | >>> |
| 6 | >>> SSLProtocol ALL -SSLv2 -SSLv3 |
| 7 | >>> |
| 8 | > |
| 9 | > Isn't it a browser compatibility issue though? Are there browsers out |
| 10 | > there that support SSLv3 but not TLS? |
| 11 | > |
| 12 | |
| 13 | IE6 on Windows <= XP. TLSv1 is technically supported, but it's disabled |
| 14 | by default. |