from Hacker News

How POODLE Happened

by dfranke on 10/15/14, 12:10 AM with 7 comments

• by spindritf on 10/15/14, 12:54 PM

  If I disable everything except TLS 1.2 in nginx, how much breakage should I expect? Has anyone tried?

  The latest stable Fx and Chrome, including mobile, will still work, right? What about various web services like rss readers or the google bot?

• by baby on 10/15/14, 11:12 AM

  Really great explanation, as I asked there I don't see how it can be used if we don't know how long the padding is.

  One idea would be to try to change the ciphertext so it would produce a entire padding block (and then it would be easy to test if it is indeed an entire block of padding just be tampering it without modifying the last byte and it would still be accepted).

  I guess someone here could answer my question?