https://bugzilla.redhat.com/show_bug.cgi?id=1702439
--- Comment #23 from Richard Maciel Costa <rcosta(a)redhat.com> ---
Mitigation:
This attack will not work if client-certificate authentication is in place
because anonymous ciphers would not then be available.
Another possible mitigation is to disable anonymous ciphers on clients.
--
You are receiving this mail because:
You are on the CC list for the bug.