3 ms·
By default TLS 1.0 is enabled, I disabled it myself ages ago as other more robust options were supported and whilst extensions have been added at the time I fel
by Zenst 14y ago
By default TLS 1.0 is enabled, I disabled it myself ages ago as other more robust options were supported and whilst extensions have been added at the time I felt it was for the best. Worked fine for me until this moment at least when I have used that particular box, but nice to always learn.
in short - no default is TLS 1.0 on, I changed it to disabled for TLS 1.0 and left SSL 2.0 and 3.0 enabled as they are by default.
- marshray 14y agoSSL 2.0 is old and busted. You ought to disable it. SSL 3.0 is all-but identical to TLS 1.0.
- CodesInChaos 14y agoWhy do you disable the newest protocol version (TLS 1.0 is essentially SSL 3.1) but keep the older versions? I'd enable SSL 3.0 and TLS 1.x, but disable SSL 2.0 since it's old and broken.