So now we know that there are still people out there with XP and IE6. I am surprised, I must admit

.
Now that the major browser vendors are all quickly updating to resolve this issue with SSLv3, we will leave SSLv3 enabled on our servers. Basically, they are making it so no user session can be manipulatively downgraded to SSLv3 and thus won't be vulnerable.
So, this vulnerability will only impact users with browsers that have not yet fixed the SSLv3 issue. That means already almost everyone using updated browsers is GOOD (not sure on all browsers, but I know Chrome resolved it). Therefore, we conclude that this change is fairly safe, or much safer than it would have been immediately after the flaw was first unveiled a few months ago. Further, many or most major web sites still allow SSLv3.
As for the various credentialed logins we have:
1. Forum password will let you log in to the forum.
2. You can also log in from the products.bitsum.com website, so long as the account has the same email address. This password might be different, but if it's updated, they may (or may not) sync. I think they will sync.
3. Legacy site Support area is off on its own, with it's own accounts and passwords.