4 ms·
I know some people use SSL and TLS interchangeably, but just in case, I'd recommend using TLS not SSL. SSLv2 and SSLv3 have known security issues and have been
by neoCrimeLabs 10y ago
I know some people use SSL and TLS interchangeably, but just in case, I'd recommend using TLS not SSL. SSLv2 and SSLv3 have known security issues and have been superseded by TLSv1 and above.
Also, here's a great server side TLS guide that explains best practices for TLS: https://wiki.mozilla.org/Security/Server_Side_TLS https://wiki.mozilla.org/Security/Server_Side_TLS
- brettgoulder 10y agoSorry about the confusion. It is all TLS under the hood, SSLv3 is completely disabled: https://devcenter.heroku.com/articles/ssl#supported-ssl-protocols https://devcenter.heroku.com/articles/ssl#supported-ssl-prot...