Initial strawman for the 1.8.1 release notes

I would say that jclouds isn't vulnerable, it is the application that
allows issuing arbitrary untrusted requests. Better yet, say nothing.

Basically those interested in the relationship to jclouds and the recently
announced POODLE (link to poodle) attack should read our blog on the topic.

In that blog, state the facts (ex what the components and cite known
malpractice like trust all certs).

Provide links to jiras that we logged that impede disabling ssl
Provide links to folks authoritative on the subject and encourage them to
assess themselves.

That's it.

Less assessing on behalf of unknown application or absorbing responsibility
for unknown deployments, only facts and followup!

Imagine if we did this for every recent vulnerability thay exists somewhere
in the transport layer, we would only be able to afford short but sweet.

Sadly, this is all I can afford to spend on this topic, so give your best
as we all need to move onto things that are far more important than this.