[lug] apache config, TLSv1 versus SSLv2?

David L. Anselmi anselmi at anselmi.us
Sun Sep 4 14:27:58 MDT 2005


Lee Woodworth wrote:
[...]
> TLS 1 is essentially SSL 3. TLS is a 'standard' while SSL is a
> netscape specification. SSL 2 has security issues so I wouldn't
> allow it for the server or for your browser.

Is that a vulnerability in the SSL v2 protocol, or in some 
implementations of it?  Do you have any details?

Dave



More information about the LUG mailing list