oss-sec mailing list archives

Re: Truly scary SSL 3.0 vuln to be revealed soon:

From: Mark Felder <feld () feld me>
Date: Fri, 17 Oct 2014 15:33:47 -0500



On Fri, Oct 17, 2014, at 14:40, Daniel Kahn Gillmor wrote:


Nikos (or anyone else on OSS-security), are you sure that only browsers
do this?  what about mail clients like Thunderbird or Mail.app making
IMAPS or POPS or submission connections?


Arnt Gulbrandsen explains it pretty well here:

http://archives.aox.org/archives/mailstore-users/4847/thread

Current thread:

Re: Truly scary SSL 3.0 vuln to be revealed soon:, (continued)
- - Re: Truly scary SSL 3.0 vuln to be revealed soon: Pierre Schweitzer (Oct 15)
    - Re: Truly scary SSL 3.0 vuln to be revealed soon: Ben Lincoln (0E1C7DBB - OSS) (Oct 15)
    - Re: Truly scary SSL 3.0 vuln to be revealed soon: Hanno Böck (Oct 15)
  - Re: Truly scary SSL 3.0 vuln to be revealed soon: ishish (Oct 16)
    - RE: Truly scary SSL 3.0 vuln to be revealed soon: Sona Sarmadi (Oct 16)
    - Re: Truly scary SSL 3.0 vuln to be revealed soon: Daniel Kahn Gillmor (Oct 17)
    - neuter the poodle (was: Re: Truly scary SSL 3.0 vuln to be revealed soon:) mancha (Oct 17)
    - Re: neuter the poodle (was: Re: Truly scary SSL 3.0 vuln to be revealed soon:) Nikos Mavrogiannopoulos (Oct 18)
    - Re: Re: neuter the poodle mancha (Oct 18)
    - Re: Re: neuter the poodle Nikos Mavrogiannopoulos (Oct 18)
    - Re: Truly scary SSL 3.0 vuln to be revealed soon: Mark Felder (Oct 17)