POODLE - SSL v3.0 security vulnerability

[In*the*AIR 1]

Read this

http://googleonlinesecurity.blogspot.fr/2014/10/this-poodle-bites-exploiting-ssl-30.html

 

Anything to worry about concerning airvnp connections using openvpn over SSL?

[Staff 9751]

 

Read this
http://googleonlinesecurity.blogspot.fr/2014/10/this-poodle-bites-exploiting-ssl-30.html
 
Anything to worry about concerning airvnp connections using openvpn over SSL?

 

Hello!

 

Not at all. About the web site, SSL 3.0 is not supported https://www.ssllabs.com/ssltest/analyze.html?d=airvpn.org

 

About OpenVPN, the external layers are on TLS, not SSL.

 

About OpenVPN over SSL, even if your stunnel negotiated with SSL 3.0, the underlying security provided by OpenVPN layers ensures no problems.

 

Kind regards

[rickjames 106]

There's a browser 'fix' for this floating around for firefox.

 

Type about:config in the address bar

Search for: security.tls.version.min

change the setting from 0 to 1

 

security.tls.version.min 1

[In*the*AIR 1]

thank you both for the answers, I did the browser fix on Firefox.