MS ends the support of TLS prior to 1.2 in october. [صورة] Preparing for TLS 1.2 in Office 365 and Office 365 GCC - Office 365 How to prepare to use TLS 1.2 for all client-server and browser-server combinations in Office 365 and Office 365 GCC after support for TLS 1.0 and 1.1 is disable…

[صورة] Pierre_GRAND: Is TLS 1.2 supported on Discourse? Yes: https://github.com/discourse/discourse_docker/blob/master@{2018-02-13}/templates/web.ssl.template.yml#L21

@sam @mpalmer should we even be supporting TLS v1? That seems positively ancient … as of 2014 all major browsers supported TLS v1.2?

I’m happy to nuke older browser support if you want. It’d reduce the cipher list, too, because most of the entries in there are to support older browsers. The main reason I didn’t go “full strict” last time I reviewed those settings is because while you can gracefully degrade UI on older browsers,…

It looks like we are safe to disable TLS V1 at least because we don’t support IE10, and IE11 supports TLS V1.1 [augurar] Should I disable TLS 1.0 on my servers? tls, webserver, pci-dss, known-vulnerabilities asked by augurar on 07:41PM - 23 Nov 15 UTC …

Oh but Matt’s point of you don’t even get an error page or anything except for “broken cert” kind of stands. I think that given: TLS 1, when properly configured has no known security vulnerabilities. Newer protocols are better designed and better address the potential for new vulnerabilities. I…

It is pointless though any browser so old that it only supports TLS v1 will not load Discourse’s advanced JS anyways.

Sure, but I wonder, does this mean we want to remove? https://github.com/discourse/discourse/blob/master/vendor/assets/javascripts/browser-update.js.erb

Maybe, looking at the old dates there and market share of ancient stuff…

Just as a reference of what others are doing, GitHub (which admittedly has an audience that is rather likely to keep browsers up to date) is disabling TLS 1.0 and 1.1 now: [صورة] Weak cryptographic standards removal notice Last year we announced the deprecation of several weak cryptogra…

We should remove tls v1 @mpalmer — that seems quite safe to me.

اعتبارًا من 31 أكتوبر 2018، لن تدعم Microsoft Office 365 بروتوكولي TLS 1.0 و1.1 بعد الآن

الدعم

Justin_Vega (Justin Vega) 22 مارس 2020، 12:08ص 16

في هذه الحالة، هل سيتم تعطيل TLS 1.1 في يونيو؟

الموضوع		الردود	مرات العرض
SSL/TLS errors on very old browsers connecting to Discourse Support	18	4248	9 أكتوبر 2019
'Could not create SSL/TLS secure channel error' when connecting to Discourse API from Windows Server Support	7	1235	15 أكتوبر 2019
Enabling TLS 1.3 Feature	7	2100	27 مارس 2023
Discourse not working on an old phone with an unsupported browser Support	15	2226	7 فبراير 2020
How should I enable letsencrypt while discourse is beside other websites Self-hosting	20	5204	14 ديسمبر 2022

اعتبارًا من 31 أكتوبر 2018، لن تدعم Microsoft Office 365 بروتوكولي TLS 1.0 و1.1 بعد الآن

الموضوعات ذات الصلة