SSL 3 is dead, killed by the POODLE attack | Qualys
Qualys reported on October 14 that the POODLE attack (CVE-2014-3566) exploits a flaw in the CBC encryption scheme as implemented in SSL 3, and is conceptually similar to the 2011 BEAST exploit. Exploiting it requires an attacker to inject malicious...