How to prevent SSLv3/Poodle attack?

Geoff Winkless cyrus at geoff.dj
Wed Oct 15 11:36:39 EDT 2014


Genuine question: is it shown that POODLE impacts on IMAPS?

I don't see how POODLE could affect an IMAPS session, since it only works
if you can MITM a non-SSL session on the user's browser and force it to
request the same target page over and over.

Cheers

Geoff
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.andrew.cmu.edu/pipermail/info-cyrus/attachments/20141015/b0089138/attachment.html 


More information about the Info-cyrus mailing list