<html><body><div style="color:#000; background-color:#fff; font-family:Courier New, courier, monaco, monospace, sans-serif;font-size:13px">Thank you, Rich, but the only thing that I can do is turn on or off the available ciphersuites, it is a dilemma, I am stuck on an old server version.<br><div id="yui_3_16_0_1_1419855188301_13956"><span></span></div> <div class="qtdSeparateBR"><br><br></div><div style="display: block;" class="yahoo_quoted"> <div style="font-family: Courier New, courier, monaco, monospace, sans-serif; font-size: 13px;"> <div style="font-family: HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif; font-size: 16px;"> <div dir="ltr"> <font face="Arial" size="2"> El Miércoles, 24 de diciembre, 2014 14:06:42, "Salz, Rich" <rsalz@akamai.com> escribió:<br> </font> </div> <br><br> <div class="y_msg_container"><div class="yqt0157607263" id="yqtfd36630">> What do you think is worst having enabled, POODLE or TLS with 56 bit keys?</div><br clear="none"><br clear="none">Install the SCSV fallback. Modern clients (say those written shortly after the start of this century) will do TLS, older ones can use SSL, and you can avoid having the modern ones tricked into acting like older ones. The server-side code is pretty easy to do, and is bundled into OpenSSL since the time of disclosure.<br clear="none"><br clear="none">Note that this will catch many false-positives because of network hiccups and browsers not always being able to tell when it's the network and when it's the server denying them.<br clear="none"><br clear="none">_______________________________________________<br clear="none">The cryptography mailing list<br clear="none"><a shape="rect" ymailto="mailto:cryptography@metzdowd.com" href="mailto:cryptography@metzdowd.com">cryptography@metzdowd.com</a><br clear="none"><a shape="rect" href="http://www.metzdowd.com/mailman/listinfo/cryptography" target="_blank">http://www.metzdowd.com/mailman/listinfo/cryptography</a><div class="yqt0157607263" id="yqtfd78796"><br clear="none"></div><br><br></div> </div> </div> </div> </div></body></html>