1

To prevent POODLE vulnerability, I'd like to turn off SSL 3.0 on my server host. But before then, would like to test my app (it uses mainly standard Android APIs) still work with TLS without actually turning off SSL 3.0 on server side.

Is there a way to turn off SSL 3.0 in Android and iOS?

Cheers, Tyn

Tyn
  • 555
  • 7
  • 22

1 Answers1

0

I wrote about it here http://www.albertobarrera.net/?p=82 for iOS, in few words you have to change the TLSMinimumSupportedProtocol value to kTLSProtocol1 in the configuration object of the NSURLSession.

Alberto Barrera
  • 329
  • 1
  • 4