https://bz.apache.org/bugzilla/show_bug.cgi?id=64409

--- Comment #5 from Md Mahir Asef Kabir <mdmahiras...@vt.edu> ---
Hi all,

First of all thanks a lot for taking time to give your thoughtful answers.

I just have one thing to focus on - 

It shows in the installation documentation in RUNNING.txt file that, we need to
download a Java SE Runtime Environment (JRE), release version 8 or later in
order to run the application.

Thing is, for JDK 8 TLS will be TLSv1.2. According to this article here -
https://access.redhat.com/articles/2112261, TLSv1.2 is also not secure.

So I was wondering if that seems like a problem to you. A solution for that
would be to update the RUNNING.txt, to recommend users to run the application
in Java 11 or higher.

Just thought I should point it out in case it helps.

-- 
You are receiving this mail because:
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org

Reply via email to