How to disable SSLv3

One-stop resource on how to effectively disable SSLv3 in major web browsers as well as in web, mail and other servers that may still be using it.


If you are using NodeJS as a web server (which might not be a good idea), you should set secureOptions to:

constants.SSL_OP_NO_SSLv3 | constants.SSL_OP_NO_SSLv2

More info in this Gist by 3rd-Eden.


This page was compiled by Michele Spagnuolo.