Re: httpd vs TLS

Joerg Sonnenberger <[email protected]> Thu, 17 Mar 2016 12:07:37 +0100

Newsgroups	gmane.os.netbsd.devel.security
Message-ID	<[email protected]>

On Thu, Mar 17, 2016 at 09:51:23AM +0000, Mateusz Kocielski wrote:
> I believe that the problem is that we deny TLSv1

TLS 1.0 to be precise. IIRC there are some concerns about TLS 1.0, but
the browser support is a bit on the weak side for slightly outdated
versions (e.g. Firefox ESR 24 doesn't enable v1.1 or v1.2). I find it
more useful to enable it.

Joerg