Re: Dropping SSL2 in 7.1
| From: | Scott Arciszewski | Date: | Thu, 14 Jul 2016 08:40:20 +0000 |
| Subject: | Re: Dropping SSL2 in 7.1 | ||
| References: | 1 2 3 | Groups: | php.internals |
| Request: | Send a blank email to internals+get-94507@lists.php.net to get a copy of this message | ||
I was making a reference to the DROWN attack
On Jul 14, 2016 4:28 AM, "Matteo Beccati" <php@beccati.com> wrote:
> On 13/07/2016 23:42, Scott Arciszewski wrote:
> > If we don't drop SSL2 support we might DROWN in technical debt.
> >
> > This would get a massive +1 from me. (Can we consider dropping SSL3 too
> in
> > 7.2?)
>
> I'm all for dropping it. Just to be clear though, what's the massive
> technical debt we'd drown into?
>
>
> Cheers
> --
> Matteo Beccati
>
> Development & Consulting - http://www.beccati.com/
>