Re: [openssl-users] SSL version status

2016-01-28 Thread Karl Denninger
On 1/27/2016 07:56, Nulik Nol wrote: > Hi, > I have to implement SSL/TLS in a proprietary web server daemon. I am > only familiar with SSL as a user, not as developer, so my question is. > What versions of SSL should I support for best compatibility and > optimal development time? How much old brow

Re: [openssl-users] SSL version status

2016-01-27 Thread Viktor Dukhovni
> On Jan 27, 2016, at 8:56 AM, Nulik Nol wrote: > > How much old browsers are out there that > still use older SSL versions? Because, Wikipedia says SSL 3.0 was > deprecated by Jun 2015 but if I only implement TLS, I may lose many > visitors with old browsers, right ? You do not have to enable

Re: [openssl-users] SSL version status

2016-01-27 Thread Nulik Nol
Thanks for the link! This says it all: " o Implementations MUST NOT negotiate SSL version 2. Rationale: Today, SSLv2 is considered insecure [RFC6176]. o Implementations MUST NOT negotiate SSL version 3. Rationale: SSLv3 [RFC6101] was an improvement over SSLv2 and plugged so

[openssl-users] SSL version status

2016-01-27 Thread Nulik Nol
Hi, I have to implement SSL/TLS in a proprietary web server daemon. I am only familiar with SSL as a user, not as developer, so my question is. What versions of SSL should I support for best compatibility and optimal development time? How much old browsers are out there that still use older SSL ver