15 Oct
2014
15 Oct
'14
11:05 a.m.
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256
Summary:
OpenVPN-NL is not vulnerable to the POODLE attack on SSLv3 [1].
Background:
On October 14th 2014, Google released a SSLv3 vulnerability called 'POODLE' [1]. The vulnerability allows an attacker to obtain the plaintext of connections secured with SSLv3.
OpenVPN-NL is not vulnerable, since OpenVPN-NL never supported SSLv3 or SSLv3 fallback.
[1] http://googleonlinesecurity.blogspot.nl/2014/10/this-poodle-bites-exploiting...
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
iQEcBAEBCAAGBQJUPjjkAAoJEEEwndWOY1w5CIIH/2vFFL4eCqRn2U6MqPNSUWis
nMMFJpjsKWXc2ItGEGJwYCrPqpGJfJ47NVAfQRO3q+hXg7sgaj7MT+Phyv4+id7Z
535GIMLCXP9WCliUJFYac7665XdfwrmzNcFTFuqrqtfVwBsajMuECasExga/ubuV
GjZ/7cNYOhtfzQcS4JnqcDbWERwqzky0RvkDnaVVFWQqKyuceJBzdIML+iY46+d2
0eAhdn58VZb8LZqYEPZYD/AnRGbR7R1SgGQ58wRMz07fcYyA8x4YxbAzaHztO9Yf
2nuifBGxk/3TX0WKDIQcNbP56gUcAuilfHW7JriqbiAMV6ya5b8lPpGBUbm3xh8=
=pSYZ
-----END PGP SIGNATURE-----