Re: Bug#766395: emacs/gnus: Uses s_client to for SSL.

[Lars Magne Ingebrigtsen]

Florian Weimer <address@hidden> writes:

> Uhm, if this happens, the server has been downgraded.  The handshake
> will fail if a man-in-the-middle attempts to force the use of SSL 3.0,
> and both ends support something newer.  (As far as I can tell, Emacs
> does not implement the vulnerable protocol downgrade code, unlike
> browsers.)

Oh.  Than what's all this fuss about, then?  Just the normal churn of
"security professional" drama?

-- 
(domestic pets only, the antidote for overdose, milk.)
   bloggy blog: http://lars.ingebrigtsen.no