0

Is there a point in time at which browsers will refuse to connect to web servers that support SSLv3 in addition to TLS 1.0/1.1/1.2? Will they produce warnings?

I assume the browser would be content using TLS 1.2 but am concerned that leaving SSLv3 (for the time being) might cause a poor user experience.

3

Browsers will use the highest supported protocol negotiated between it and the server, even if SSLv3 is enabled.

Newer browsers have SSL disabled, so will not be vulnerable to downgrade attacks.

Also see here TLS/SSL support history of web browsers.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.