Re: heads-up: tls v2.0.0
Viktor Dukhovni <[email protected]>
| Newsgroups | gmane.comp.lang.haskell.cafe |
|---|---|
| Message-ID | <[email protected]> |
On Fri, Jan 19, 2024 at 06:41:55PM +0900, Kazu Yamamoto (山本和彦) via Haskell-Cafe wrote:
> > TLS is not just for the web. There are various application ecosystems
> > that are noticeably less agile than web browsers, and substantially not
> > at risk from the various browser-related attacks on TLS 1.0.
>
> Why cannot you switch to TLS 1.2?
I don't control the software stacks used by others, with whom I still
need to communicate. Or with legacy devices, ...
> TLS 1.2 is 16 year old, very similar to TLS 1.0 and much more secure.
But note that TLS 1.0 is much more secure than cleartext. It is fine to
disable it by default, but I would prefer that it still be available.
--
Viktor.
_______________________________________________
Haskell-Cafe mailing list
To (un)subscribe, modify options or view archives go to:
http://mail.haskell.org/cgi-bin/mailman/listinfo/haskell-cafe
Only members subscribed via the mailman list are allowed to post.