Re: [Bug-wget] please remove SSLv3 from being used until explicitly specified

[Ángel González]

Ángel González wrote:
> First of all, note that wget doesn't react to a disconnect with a 
> downgraded retry thus
> it is mainly not vulnerable to poodle (you could only use 
> CVE-2014-3566 against servers
> not supporting TLS).
Note I tested both openssl and gnutls builds. Then I rebuilt 1.15¹ with 
both libraries using
versions prior to poodle announcement. None of them was affected.


¹ I am having some problem with src/Makefile generation, so I didn't 
test with master, but that
should be equivalent.