Intent to and unship: SSLv3

80 views
Skip to first unread message

Masatoshi Kimura

unread,
Feb 27, 2015, 5:44:43 PM2/27/15
to dev-pl...@lists.mozilla.org
Summary: SSLv3 is an outdated and known broken security protocol. I'll
remove the support from Gecko completely.

Bug: https://bugzilla.mozilla.org/show_bug.cgi?id=1106470

Spec: https://tools.ietf.org/html/draft-ietf-tls-sslv3-diediedie-00

Platform coverage: All

Target release: Gecko 39. Chrome will also drop the support a few weeks
later. Also, SSLv3 support will remain in ESR 38 and Thunderbird 38.

Preference behind which this will be implemented: It is already disabled
behind a preference by default since Gecko 34.

--
VYV0...@nifty.ne.jp
Reply all
Reply to author
Forward
0 new messages