Adam Langley e5624edc7e crypto/tls: support TLS_FALLBACK_SCSV as a server. ... A new attack on CBC padding in SSLv3 was released yesterday[1]. Go only supports SSLv3 as a server, not as a client. An easy fix is to change the default minimum version to TLS 1.0 but that seems a little much this late in the 1.4 process as it may break some things. Thus this patch adds server support for TLS_FALLBACK_SCSV[2] -- a mechanism for solving the fallback problem overall. Chrome has implemented this since February and Google has urged others to do so in light of yesterday's news. With this change, clients can indicate that they are doing a fallback connection and Go servers will be able to correctly reject them. [1] http://googleonlinesecurity.blogspot.com/2014/10/this-poodle-bites-exploiting-ssl-30.html [2] https://tools.ietf.org/html/draft-ietf-tls-downgrade-scsv-00 LGTM=rsc R=rsc CC=golang-codereviews https://golang.org/cl/157090043		2014-10-15 17:54:04 -07:00
..
aes
cipher
des
dsa
ecdsa
elliptic
hmac
md5
rand
rc4
rsa
sha1
sha256
sha512
subtle
tls	crypto/tls: support TLS_FALLBACK_SCSV as a server.	2014-10-15 17:54:04 -07:00
x509	crypto/x509: correct field name in comment	2014-10-15 06:20:55 -07:00
crypto.go