Skip to content

Drop support for SSL 1.0 and 1.1 #366

@gustawdaniel

Description

@gustawdaniel

Why?

TLS 1.0 and 1.1 are now officially deprecated due to known security flaws. They have largely disappeared from use across the top one million sites, although a small number of web servers, 0.4 percent, still select one of them during an HTTPS connection.

https://www.f5.com/labs/articles/threat-intelligence/the-2021-tls-telemetry-report

More stats:

https://webtribunal.net/blog/ssl-stats/

On ssl analyser https://www.ssllabs.com/ssltest we getting B instead of A because of support of SSL 1.0 and 1.1 because it simplifies Man in the middle attack.

Metadata

Metadata

Assignees

Labels

No labels
No labels

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions