httpd-docs mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From bugzi...@apache.org
Subject DO NOT REPLY [Bug 50307] Misleading documentation regarding "strong" encryption
Date Sat, 20 Nov 2010 14:37:51 GMT
https://issues.apache.org/bugzilla/show_bug.cgi?id=50307

Florent Daigniere <florent.daigniere@trustmatta.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |florent.daigniere@trustmatt
                   |                            |a.com

--- Comment #3 from Florent Daigniere <florent.daigniere@trustmatta.com> 2010-11-20
09:37:49 EST ---
-      SSLProtocol all<br />
-      SSLCipherSuite HIGH:MEDIUM<br />
+      SSLProtocol all -SSLv3<br />
+      SSLCipherSuite HIGH:!ADH:!EXP:!MD5:!NULL<br />

Hmm, afaic you made a typo: SSLv2 is insecure, v3 is ok

-- 
Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: docs-unsubscribe@httpd.apache.org
For additional commands, e-mail: docs-help@httpd.apache.org


Mime
View raw message