jmhodges (Jeff Hodges)
- Login: jmhodges
- Email: jeff@somethingsimilar.com
- Registered on: 01/16/2014
- Last sign in: 01/17/2014
Issues
| open | closed | Total | |
|---|---|---|---|
| Assigned issues | 0 | 0 | 0 |
| Reported issues | 0 | 1 | 1 |
Activity
01/24/2014
-
11:11 PM Ruby Bug #9424: ruby 1.9 & 2.x has insecure SSL/TLS client defaults
- Why do people think it's impossible to disable TLS compression on 0.9.8 with zlib installed?
01/22/2014
-
- On my local machine, that patch does give a Probably Okay response, having removed the TLS compression and the weak cipher suites. Thank you very much for your work and patience.
01/20/2014
-
- That was how it was laid out originally, but GitHub wouldn't display the last 6 or so emails and said "Not showing 6 files" or something.
01/17/2014
-
- I've published the email thread with security@ruby-lang.org https://gist.github.com/jmhodges/d6480f5f81f25b0dfa15
-
- Ruby 1.9, 2.0, and 2.1 use insecure defaults for SSL/TLS client connections. They have inherited or overridden configs that make the OpenSSL-controlled connections insecure. Note: both OpenSSL's and Ruby's defaults in all tested versions...