[Ach] Android SSL downgrade Android 2.3

ianG iang at iang.org
Thu Dec 19 17:24:08 CET 2013

On 19/12/13 18:10 PM, Ralf Schlatterbeck wrote:
> This is a blog-post speculating on the reasons why SSL was downgraded to
> RC4 for SSL for Relase 2.3 in December 2010 -- note that BEAST was in
> 2011 (!)
> Can anybody here provide more insight or are we left with the
> speculation that this was intentional?
> http://op-co.de/blog/posts/android_ssl_downgrade/

My comments on this from a month or two back:
however they do not necessarily answer your question ;-)


More information about the Ach mailing list