SSL broken, again, in POODLE attack

Yet another flaw could prove to be the final nail in SSLv3's coffin.

Read the whole story

 

[Bernardo Verda]

CaptainTightpants[/url]":h24pjoue]

Knoware[/url]":h24pjoue]I went to the Mozilla page linked in the article and looked at the Add-On and attempted to install it, Firefox warns me the Author isn't verified and tells me I shouldn't trust it!

I'm no security expert either and when I see that nice lock icon and the "Mozilla.org certified" stamp, it really makes me wonder...

To be clearer. This is the link in the Mozilla page that the articled linked to that gives me the warning:
https://addons.mozilla.org/en-US/firefo ... n-control/

Yeah, noticed that myself and followed the about:config instructions mentioned in another post instead. Also fixes Android Firefox (where the extension apparently won't install according to another comment).

Whatever the issue was, it appears to have been dealt with.
I installed the add-on (SSL Version Control 0.2) less than an hour ago, with no problems
(except that I would have preferred radio-buttons ).

Also, Mozilla is saying :
"As of version 0.2, this add-on should work with all Mozilla products, including Firefox, Firefox for Android, Thunderbird, and Seamonkey."