Hacker News Reader

They disabled insecure TLS version fallback. Older versions of the Certicom TLS stack used in older versions of WebLogic are affected for example (change to JSSE).

View on HN

The next release (in six weeks) will also disable RC4 fallback, except for a few sites which are on a whitelist for one release after that.

Reply on news.ycombinator.com