Re: https://www.modsecurity.org/ TLS 1.0
| Newsgroups | gmane.comp.apache.mod-security.user |
|---|---|
| Message-ID | <20200312225726.Horde.7mdQk0S-N4nk5eMZsOBTmVp@webmail.inetadmin.eu> |
Citát Reindl Harald <[email protected]>: > Am 12.03.20 um 17:57 schrieb Reindl Harald: >> https://www.modsecurity.org/ >> >> seriously? >> >> it's not a breaking news that firefox and other browsers are planning >> disable TLS1.0/1.1 for many months > > https://i.imgur.com/wC4IJbs.png shows the by far the dumbest webserver > setup i have faced in the past 15 years > > The server supports only older protocols, but not the current best TLS > 1.2. Grade capped to C. > > This server accepts RC4 cipher, but only with older protocols. Grade > capped to B. > > This server does not support Forward Secrecy with the reference > browsers. Grade capped to B. > > This server does not support Authenticated encryption (AEAD) cipher > suites. Grade capped to B. > > This server supports TLS 1.0. Grade capped to B. > > ------------------------ > > and yes *i know* that we are *currently* Grade B because *allowing* TLS > < 1.2 for now for a short time to redirect support calls of endusers as > dumb as your webadmins to somewhere else Hi guys, i can setup it for you, contact me if you are interested, i have almost 20 years of experiences with linux administration focusing on security. azur _______________________________________________ mod-security-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/mod-security-users Commercial ModSecurity Rules and Support from Trustwave's SpiderLabs: http://www.modsecurity.org/projects/commercial/rules/ http://www.modsecurity.org/projects/commercial/support/