2 jibberjab May 29, 2015 14:57

Hi @jibberjab
I thought that ssl_v3 is called TLS 1.2.
Also https works with certificates that are encrypted using either ssl or TLS. So whatever is used doesn't matter in this case as the message is that some links point to unsecured sites (as a the result of the plugins).
Some older certificates may still use older encrytion based on older ssl versions. I guess that the official certificate authorities are already working with TLS 1.2 - at least mine got TLS 1.2 already.
Kind regards
@zebulon wrote:
I found that certain plugins are not ready to link to https:// ...
We take note of this.
Can you please mention other examples of plugins that you found in this situation, besides of the video plugin ?
SSL has enough discovered security flaws at this point that it's likely to be replaced with TLS at some point but, I agree, plugins should definitely be conscious of secured sites.
(Interestingly enough, I just got an email from eWeek mentioning an upcoming eSeminar covering this very subject. Enrollment is free: http://www.eseminarslive.com/c/a/security/GeoTrust-060315/ )
jj.