Can't disable TLS 1.0

Rainer Duffner rainer at ultra-secure.de
Sat Nov 17 15:56:39 UTC 2018



> Am 17.11.2018 um 04:56 schrieb Jeremy Ardley <nginx-forum at forum.nginx.org>:
> 
>        ssl_protocols TLSv1.1 TLSv1.2; # Dropping SSLv3, ref: POODLE



ssl_protocols TLSv1.2;


You need to disable 1.0 and 1.1.
AFAIK.


If you look around, everybody (ebay, github, MSFT, Google etc.pp.) who disabled 1.0 also disabled 1.1.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mailman.nginx.org/pipermail/nginx/attachments/20181117/f76fdbe1/attachment.html>


More information about the nginx mailing list