Removing SSL 3.0/Poodle

• From: Jim Manico <jim@manico.net>
• Date: Tue, 21 Oct 2014 02:22:30 -0400
• To: HTTP Working Group <ietf-http-wg@w3.org>
• Message-Id: <5F32DDF1-43DE-4832-B8B1-DFDA6D0074D1@manico.net>

Now that SSL 3.0 is dead due to POODLE, is there any chance it can be removed from the HTTP2 spec? It's security theatre at best right now.

Aloha,
--
Jim Manico
@Manicode
(808) 652-3805

Received on Tuesday, 21 October 2014 06:22:57 UTC