oss-sec mailing list archives

Re: feedback requested regarding deprecation of TLS 1.0/1.1


From: Marco Moock <mm () dorfdsl de>
Date: Wed, 7 Aug 2024 21:08:40 +0200

Am Tue, 6 Aug 2024 14:48:14 -0400
schrieb Demi Marie Obenour <demi () invisiblethingslab com>:

On Tue, Aug 06, 2024 at 05:12:32PM +0200, Marco Moock wrote:
Am Tue, 6 Aug 2024 05:02:14 -0400
schrieb Neil Horman <nhorman () openssl org>:
  
1) Are distributions/users comfortable with this approach in the
time frame proposed?  

As a user, this is acceptable for me, but I know there are still
machines outside that only offer such old versions.
Some of them can't be upgraded easily because the vendor doesn't
provide any new versions.  

Can those machines be put behind a proxy?

Yes, but the proxy must support old and new versions and this will be
hard when support will be dropped. :-)


Current thread: