Reply to post: Snake Oil, FUD and the security problem known as Web Browser

That shot you heard? SSLv3 is now DEAD

Anonymous Coward
Anonymous Coward

Snake Oil, FUD and the security problem known as Web Browser

The TP Online server does not exhibit any unusual properties, and there are *NO* server vulnerabilities visible in the SSL Labs Scan.

https://www.ssllabs.com/ssltest/analyze.html?d=tponline.co.uk

What this server does not provide is numerous mitigations for common and stupid Client / Browser bugs. But fixing (or not ever implementing) these stupid client side bugs is the jobs of those implementing the clients, not of those running servers and trying to offer good interop.

The design of the SSLv3 and TLS protocol will protect the handshake between properly implemented clients and properly implemented servers. BEAST and POODLE are attacks on Browsers exploiting browser design flaws.

POST COMMENT House rules

Not a member of The Register? Create a new account here.

  • Enter your comment

  • Add an icon

Anonymous cowards cannot choose their icon