diff --git a/appendices/transports.xml b/appendices/transports.xml index ad183a8fec43..e49b4fd6b809 100644 --- a/appendices/transports.xml +++ b/appendices/transports.xml @@ -22,6 +22,13 @@ ssl://, tls://, sslv2:// & sslv3://. + + + The sslv2:// and sslv3:// transports + are obsolete and should not be used. They are documented for + backward compatibility only. + + @@ -38,8 +45,6 @@ tcp://www.example.com udp://www.example.com ssl://www.example.com - sslv2://www.example.com - sslv3://www.example.com tls://www.example.com @@ -78,11 +83,18 @@ - ssl:// will attempt to negotiate an SSL V2, - or SSL V3 connection depending on the capabilities and preferences - of the remote host. sslv2:// and - sslv3:// will select the SSL V2 or SSL V3 - protocol explicitly. + ssl:// will attempt to negotiate a secure SSL/TLS + connection depending on the capabilities and preferences of both the + client and the remote host. The actual protocols that may be used are + determined by the OpenSSL configuration and by any options provided + through stream_context_create, such as + ssl.crypto_method. + + + + The SSLv2 and SSLv3 protocols are obsolete and insecure. Their use is + strongly discouraged and they are no longer enabled by default in + modern versions of PHP and OpenSSL.