Social networking is a corner stone for a majority of our daily lives, be it communicating with friends, sharing photos or even using social networking for advertising and business promotion. Whilst reading up about this newly discovered complication. It's apparent that websites use a range of SSL/TLS type certificates. If the connection to one fails then browsers are equipped for a fall back protocol, which will use an alternative certificate for encryption. I have found this piece of text:
Any website that supports SSLv3 is vulnerable to POODLE, even if it also supports more recent versions of TLS. In particular, these servers are subject to a downgrade attack, in which the attacker tricks the browser into connecting with SSLv3. This relies on a behavior of browsers called insecure fallback, where browsers attempt to negotiate lower versions of TLS or SSL when connections fail.
With this in mind. Since this has been made a public statement that SSLv3 is not secure, it'll attract the more malicious users to exploit it (tons more than previously). Which sparks the question:
In the time it takes for major/popular websites and browsers to switch out/disable SSLv3, currently (day 1 of the vulnerability's public release), how at risk are current social networking websites such as Twitter and Facebook. Which are currently using TLS 1.2, twitter being issued by Symantic and Facebook being issued by Digicert, with the server configurations (by assumption) to fall back to any encryption method which is not TLS1.0, but SSLv1 may be an alternative to not being completely dead?