3 ms·

What do you need TLS 1.0 support for?

• tedunangst 6y ago
  Talking to things that only support TLS 1.0. :( some old mail thing which doesn't know what year it is. I think min TLS 1.2 is probably fine for a new library, but I also think believing it's universal is pretty web centric.
  • SAI_Peregrinus 6y ago
    TLS 1.0 isn't secure. I'd rather insecure protocols and primitives not be included in a mainstream library. Maybe offer some extension library to allow support, but the default shouldn't have any risk of including such code in a way that it could be usable by a careless programmer. Same for MD5 and SHA1.
    • SAI_Peregrinus 6y ago
      Replying to myself: TLS 1.0 is now officially deprecated.