[Ach] Android SSL downgrade Android 2.3

[ianG]

On 19/12/13 18:10 PM, Ralf Schlatterbeck wrote:
> This is a blog-post speculating on the reasons why SSL was downgraded to
> RC4 for SSL for Relase 2.3 in December 2010 -- note that BEAST was in
> 2011 (!)
> Can anybody here provide more insight or are we left with the
> speculation that this was intentional?
>
> http://op-co.de/blog/posts/android_ssl_downgrade/

My comments on this from a month or two back:
http://financialcryptography.com/mt/archives/001450.html
however they do not necessarily answer your question ;-)



iang