Google has just disclosed SSL POODLE vulnerability which is a design flaw in SSLv3. Since it is a design flaw in the protocol itself and not an implementation bug, there will be no patches. Only way to mitigate this is to disable SSLv3 in your web server or application using SSL. How to test for SSL POODLE vulnerability? $ openssl s_client -connect google.com:443 -ssl3 If there is a handshake fail