SSL 3.0 vulnerability "Poodle"- disabling SSL 3.0 support

[quest]

You all have heard about it, right? This one here:

http://googleonlinesecurity.blogspot.de ... sl-30.html

To disable SSL, Chromium based browsers should be launched with parameter:

Code: Select all

--ssl-version-min=tls1

Apparently this doesn't work with iron.exe, so what should we do?

[trailmax]

Same here. Nothing happens when I add this parameter. Tried executing from command line and result: no error and no browser either.

[Jerr39]

I was able to get the parameter to work by changing the exe name in the shortcut target to chrome.exe. This might open Iron with no extensions, but it worked for me.

[quest]

Thanks Jerr39, but I still think this problem is not solved. Anyone else? The developer?

[lylejk]

Just posted this but withdrawn since I didn't see your post. I actually received the info from WIndow's Secrets newsletter. I too tried it and don't get any errors but not sure it really is protecting my browser.

[lylejk]

Did some further reading and I know this protects Iron.

https://www.poodletest.com/

[nawaz]

Thanks a lot for the link. IP-Secrets looks like something that I have been hunting for since a long time.