TLS_FALLBACK_SCSV Support

[GoogleCodeExporter]

Ubuntu has rolled out TLS_FALLBACK_SCSV patches (TLS Protocol Downgrade attack 
prevention) to their openssl packages, but servers running mod_spdy are still 
affected due to the built-in openssl.

Because of that it would be great if mod_spdy could be updated to include those 
patches.

Original issue reported on code.google.com by [email protected] on 17 Oct 2014 at 4:38

[GoogleCodeExporter]

Hello,

SPDY does not support TLS_FALLBACK_SCSV in order to prevent
protocol downgrade attacks.

I would like to know if there is an ETA for this feature,
Otherwise I will have to remove SPDY of all our servers.

Thanks in advanced for your expected cooperation and assistance about this 
matter.

Original comment by [email protected] on 11 Feb 2015 at 3:20

[GoogleCodeExporter]

You can also disable SSL3, unless you still need to support IE6 clients.

Original comment by [email protected] on 19 Feb 2015 at 1:48

[GoogleCodeExporter]

Thanks it was done

Original comment by [email protected] on 21 Feb 2015 at 11:54