Page 1 of 1

Remove SSLv3 support

PostPosted: Fri Jan 16, 2015 6:23 am
by jayw654
Since Windows Vista and higher can support TLS to connect to the Subsonic site securely and the Poodle exploit exist I'm requesting that SSLv3 to be removed from the supported ciphers list. Furthermore I would like the ability to raise the site security connections from 128bit to 256 bit keys please. No I have no interest in using Apache Tomcat to do this and if anyone choose to suggest it the reply will DEFINITELY be ignored. Not sure Tomcat is a solution but I don't want it as a solution anyhow.

If there is a way to do this that I'm not aware of such as changing a config file then I'm open to that info. Otherwise I would like the Sindre's to fix the issue.

Re: Remove SSLv3 support

PostPosted: Sat Jan 17, 2015 4:23 pm
by zeroth
+1 Most big companies are addressing this from paypal to gotomypc....It needs to be addressed.