[Ach] Interesting developments with PCI

Aaron Zauner azet at azet.org
Wed Feb 11 19:59:36 CET 2015



L. Aaron Kaplan wrote:
> Hi folks,
> 
> This is quite interesting: if PCI says that SSLv3 is "dead" and must not be used anymore then this has quite far reaching implications for any web shop dealing with credit card payments.
> 
> https://pciguru.wordpress.com/2015/02/07/ssl-is-officially-declared-dead/

.. PCI being the most useless security compliance standard ever invented
by a major conglomerate. But yes, good that they acknowledge there's a
problem (a couple of years too late).

Aaron

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 801 bytes
Desc: OpenPGP digital signature
URL: <http://lists.cert.at/pipermail/ach/attachments/20150211/e3393fa1/attachment.sig>


More information about the Ach mailing list