httpd-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Lars Eilebrecht" <l...@eilebrecht.net>
Subject Re: [UPDATED] Re: [PATCH] new default SSLCipherSuite and SSL BrowserMatch configuration
Date Mon, 09 Nov 2009 00:53:01 GMT
Stefan Fritsch wrote on 2009-11-07 11:24:03:

> Shouldn't you use something like this?
> 
> BrowserMatch "MSIE [2-5]" nokeepalive ssl-unclean-shutdown \
>                           downgrade-1.0 force-response-1.0
> BrowserMatch "MSIE [16-9]" ssl-unclean-shutdown
> 
> 
> There are no MSIE 1.x around anymore, but MSIE 10, 11, ... will
> happen in the not too distant future.

Version 10 will still take a while, but I agree that we don't have to
worry about version 1 anymore.

How about this:
  BrowserMatch "MSIE" ssl-unclean-shutdown
  BrowserMatch "MSIE [2-5]" nokeepalive downgrade-1.0 force-response-1.0


> BTW, I am not so sure that MSIE 6 works reliably with keepalive in
> all situations (e.g. with proxys, plugins, etc.). Therefore I would 
> actually prefer [2-6] and [17-9].

My experience is that never versions of MSIE 6 work fine regarding
keep-live and SSL.

cheers...
-- 
Lars Eilebrecht
lars@eilebrecht.net


Mime
View raw message