Re: TLS 1.0 and 1.1 are still enabled by default in apache2

2025-07-16 Thread Marco d'Itri
On Jul 17, Vincent Lefevre wrote: Shouldn't they be disabled for trixie? Yes! -- ciao, Marco signature.asc Description: PGP signature

TLS 1.0 and 1.1 are still enabled by default in apache2

2025-07-16 Thread Vincent Lefevre
The following bug https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=943415 was submitted in 2019 to request that TLS 1.0 and 1.1 be disabled by default, as already done for OpenSSL. But there is still no reaction from the Apache maintainers. Note also that TLS 1.0 and 1.1 were deprecated in RF