[tor-talk] New SSLv3 attack: Turn off SSLv3 in your TorBrowser

[AntiTree]

>
> Someone somewhere (I think Mike Perry quoting AGL) mentioned today that
> we'd only be
> breaking 0.3% of the internet if we do this.
>

My fact checker 9000 looked into this[1]. the 0.3% is probably close but
here are a few stats per Zmap and Alexa

- of the top 1 Million domains, 0.02% have SSLv3 as their highest version
(verified domains)
- of the entire ipv4 space, 2.8% use SSLv3 as their highest version
(unverified certificates)

[1]. https://zmap.io/sslv3/

@