Hacker News Reader

Minor highlight: Debian 8 ships with an OpenSSL which has SSLv3 disabled at compile-time.

Do you mean that only TLS is supported now?

Aye. The Debian compile rules for Jessie's OpenSSL include "no-ssl2 no-ssl3 no-ssl3-method" so it's just TLS1.0 onwards available.

SSLv3 is so 1996... Please, please, please with sugar on top, use TLS only. Also there are lots of changes in the software world in the last 20 years, which the SSL codebase didn't keep up with (mainly meaning OpenSSL).

Reply on news.ycombinator.com