Mail servers and possibly LDAP servers should probably allow it explicitly by SSL_CTX_clear_options(ctx, SSL_OP_NO_SSLv3) call for buggy legacy clients on the smtps, imaps, and ldaps ports.
- for now disable only SSLv2 by default
(can be enabled via appropriate SSL_CTX_clear_options() call)