Skip to content

Commit

Permalink
Fix typo.
Browse files Browse the repository at this point in the history
  • Loading branch information
ctz committed Feb 24, 2020
1 parent 92600ef commit 9e92828
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion rustls/src/manual/tlsvulns.rs
Expand Up @@ -116,7 +116,7 @@ rustls naturally does not support SSLv2, but most importantly does not support R
[POODLE](https://www.openssl.org/~bodo/ssl-poodle.pdf) ([CVE-2014-3566](https://nvd.nist.gov/vuln/detail/CVE-2014-3566))
is an attack against CBC mode ciphersuites in SSLv3. This was possible in most cases because some clients willingly
downgraded to SSLv3 after failed handshakes are later versions.
downgraded to SSLv3 after failed handshakes for later versions.
rustls does not support CBC mode ciphersuites, or SSLv3. Note that rustls does not need to implement `TLS_FALLBACK_SCSV`
introduced as a countermeasure because it contains no ability to downgrade to earlier protocol versions.
Expand Down

0 comments on commit 9e92828

Please sign in to comment.