[Ach] Android SSL downgrade Android 2.3

Ralf Schlatterbeck rsc at runtux.com
Thu Dec 19 16:10:30 CET 2013


This is a blog-post speculating on the reasons why SSL was downgraded to
RC4 for SSL for Relase 2.3 in December 2010 -- note that BEAST was in
2011 (!)
Can anybody here provide more insight or are we left with the
speculation that this was intentional?

http://op-co.de/blog/posts/android_ssl_downgrade/

Ralf
-- 
Dr. Ralf Schlatterbeck                  Tel:   +43/2243/26465-16
Open Source Consulting                  www:   http://www.runtux.com
Reichergasse 131, A-3411 Weidling       email: office at runtux.com
allmenda.com member                     email: rsc at allmenda.com



More information about the Ach mailing list