rapid7/metasploit-framework — pull request #4022 by todb-r7 (2014-10-15 15:30:57+00:00)
Title: Datastore options should default to TLS1, not SSL3

Otherwise, we risk getting our connections killed by particularly aggressive DPI devices (IPS, firewalls, etc)

For more on POODLE, see the links at #4018.

Squashed commit of the following:

commit 5e203851d5c9dce1fe984b106ce3031a3653e54b
Author: Tod Beardsley
Date: Wed Oct 15 10:19:04 2014 -0500

Whoops missed one

commit 477b15a08e06e74d725f1c45486b37e4b403e3c2
Author: Tod Beardsley
Date: Wed Oct 15 10:16:59 2014 -0500

Other datastore options also want TLS1 as default

commit 8d397bd9b500ff6a8462170b4c39849228494795
Author: Tod Beardsley
Date: Wed Oct 15 10:12:06 2014 -0500

TCP datastore opts default to TLS1

Old encryption is old. See also: POODLE