2 ms·
More on TLS and MITM. Even though our security unit deems TLS v1.2 and, until recently, v1.1 (!) to be secure and acceptable for the purpose of encrypting sensi
by inkyoto 5y ago
More on TLS and MITM. Even though our security unit deems TLS v1.2 and, until recently, v1.1 (!) to be secure and acceptable for the purpose of encrypting sensitive datasets in motion, I vehemently disagree with them and consider anything that is not TLS v1.3 to be insecure. The best compromise I have managed to coax out of the security unit is that the cost of a MITM for TLS v1.2 is still prohibitevely expensive for most players with nefarious intentions, albeit it is not entirely improbable.