3 ms·
Ofcourse CL should never downgrade to non-secure versions. SSLv3 is discouraged so CL wont try this. But 1.2 still ok.
by wav-part 9y ago
Ofcourse CL should never downgrade to non-secure versions. SSLv3 is discouraged so CL wont try this. But 1.2 still ok.
- majewsky 9y agoThat's what they said about SSL 3 some time ago.
- wav-part 9y agoIf a client and server both dont upgrade to secure version and still use old now-broken version, there is nothing to be done. This thread is just now getting repeatitive.
- syncsynchalt 9y agoTLS 1.2 is insecure. Prove me wrong. So I guess we can't downgrade to it, and we should make 1.3 work without re-negotiation.