> > SSL 3.0 is implemented by devssl.
>
> also by devtls and tlshand. we have to scrap SSL3 from there first.
>

oops, i didn't see that you mentioned libsec in the mail, i read the mail
too quickly. sorry.

also, i made a diff that removes SSL3 from devtls and tlshand. it's attached.
i didn't test the diff throughly, so it might be buggy. i hope not.