<html><head><meta http-equiv="Content-Type" content="text/html; charset=us-ascii"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class=""><br class=""><div><br class=""><blockquote type="cite" class=""><div class="">Am 17.11.2018 um 04:56 schrieb Jeremy Ardley <<a href="mailto:nginx-forum@forum.nginx.org" class="">nginx-forum@forum.nginx.org</a>>:</div><br class="Apple-interchange-newline"><div class=""><span style="caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none; float: none; display: inline !important;" class=""> ssl_protocols TLSv1.1 TLSv1.2; # Dropping SSLv3, ref: POODLE</span></div></blockquote><br class=""></div><div><br class=""></div><div><br class=""></div><div>ssl_protocols TLSv1.2;</div><div><br class=""></div><div><br class=""></div><div>You need to disable 1.0 and 1.1.</div><div>AFAIK.</div><div><br class=""></div><div><br class=""></div><div>If you look around, everybody (ebay, github, MSFT, Google etc.pp.) who disabled 1.0 also disabled 1.1.</div><div><br class=""></div><div><br class=""></div></body></html>