poodle

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Next revision
Previous revision
poodle [2014/12/29 12:29]
vladg created
poodle [2015/01/16 12:45] (current)
tem
Line 5: Line 5:
 The POODLE attack can be used against any browser or website that supports SSLv3. If your website or shopping cart solution has SSLv3 enabled an intruder can employ a “man-in-the-middle” exploit to decrypt sensitive information such as credit card data. We urge our partners to update their code base as soon as possible. Since this problem is in the protocol, anything that uses SSL is affected. The POODLE attack can be used against any browser or website that supports SSLv3. If your website or shopping cart solution has SSLv3 enabled an intruder can employ a “man-in-the-middle” exploit to decrypt sensitive information such as credit card data. We urge our partners to update their code base as soon as possible. Since this problem is in the protocol, anything that uses SSL is affected.
  
-To mitigate the vulnerability USAePay will be disabling the use of SSLv3 on all processing URLs starting January ​19th, 2015. Developers should start actively testing their updated software with TLS 1.x protocol on USAePay’s sandbox environment (https://​sandbox.usaepay.com) where SSLv3 has already been disabled.+To mitigate the vulnerability USAePay will be disabling the use of SSLv3 on all processing URLs starting January ​15th, 2015. Developers should start actively testing their updated software with TLS 1.x protocol on USAePay’s sandbox environment (https://​sandbox.usaepay.com) where SSLv3 has already been disabled. 
 + 
 +===== Browser Support ===== 
 + 
 +==== Internet Explorer 8 ==== 
 + 
 +If merchants can not access https://​sandbox.usaepay.com and they are using IE 8, they probably do not have TLS enabled. ​  To enable TLS go to Tools -> Internet Options -> Advanced. ​ Scroll to the bottom and check off TLS 1.0.  Merchants using IE 8 should upgrade as soon as possible. 
 + 
  
poodle.1419884950.txt.gz · Last modified: 2014/12/29 12:29 by vladg

Page Tools