# TLS to SSLv3 Downgrade

**URL:** <https://discourse.mitmproxy.org/t/tls-to-sslv3-downgrade/796>\
**Category:** help\
**Created:** [January 15, 2018, 10:42am UTC](https://discourse.mitmproxy.org/t/tls-to-sslv3-downgrade/796 "2018-01-15T10:42:57Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![christypriory](https://avatars.discourse-cdn.com/v4/letter/c/cab0a1/32.png) [@christypriory](https://discourse.mitmproxy.org/u/christypriory)\
**Post date:** [January 15, 2018, 10:42am UTC](https://discourse.mitmproxy.org/t/tls-to-sslv3-downgrade/796/1 "2018-01-15T10:42:57Z")

</div>

I have an Android app that will connect to a server with TLS 1.2. The server also supports SSLv3. I would like to know if it’s possible to configure MITM Proxy that will downgrade the connection from TLS 1.2 to SSLv3.

---

<div class="post-metadata">

**Author:** ![mhils](https://yyz2.discourse-cdn.com/flex030/user_avatar/discourse.mitmproxy.org/mhils/32/7_2.png) [@mhils](https://discourse.mitmproxy.org/u/mhils)\
**Post date:** [January 15, 2018, 12:57pm UTC](https://discourse.mitmproxy.org/t/tls-to-sslv3-downgrade/796/2 "2018-01-15T12:57:51Z")

</div>

Hi @christypriory,

You can do a man-in-the-middle attack and have a SSLv3 connection between mitmproxy and the server, but that’s generally not recommended of course. There are no known downgrade attacks for TLS 1.2 to SSLv3.