Can't disable TLS 1.0
Rainer Duffner
rainer at ultra-secure.de
Sat Nov 17 15:56:39 UTC 2018
> Am 17.11.2018 um 04:56 schrieb Jeremy Ardley <nginx-forum at forum.nginx.org>:
>
> ssl_protocols TLSv1.1 TLSv1.2; # Dropping SSLv3, ref: POODLE
ssl_protocols TLSv1.2;
You need to disable 1.0 and 1.1.
AFAIK.
If you look around, everybody (ebay, github, MSFT, Google etc.pp.) who disabled 1.0 also disabled 1.1.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mailman.nginx.org/pipermail/nginx/attachments/20181117/f76fdbe1/attachment.html>
More information about the nginx
mailing list