For those that (very reasonably) don't want to disable SSLv3 then try doing the steps outlines on the mod_ssl FAQ, http://www.modssl.org/docs/2.8/ssl_faq.html#ToC49 I am going to try this rather than disabling SSLv3 altogether and will let you know. Brendan