Re: Removing SSL 3.0/Poodle

• From: Julian Reschke <julian.reschke@gmx.de>
• Date: Tue, 21 Oct 2014 10:56:28 +0200
• To: Matthew Kerwin <matthew@kerwin.net.au>, Jim Manico <jim@manico.net>
• CC: HTTP Working Group <ietf-http-wg@w3.org>
• Message-ID: <54461FBC.5080208@gmx.de>

On 2014-10-21 08:49, Matthew Kerwin wrote:
> On 21 October 2014 16:22, Jim Manico <jim@manico.net
> <mailto:jim@manico.net>>wrote:
>
>     Now that SSL 3.0 is dead due to POODLE, is there any chance it can
>     be removed from the HTTP2 spec? It's security theatre at best right now.
>
>
> ​I didn't think SSL (any version) was in the HTTP/2 spec.​
> ...

Nor in HTTP/1.1...

Best regards, Julian

Received on Tuesday, 21 October 2014 08:57:13 UTC