Skip to content

Set minimum TLS version to use

Mikhail Mazurskiy requested to merge ash2k/min-tls-version into master

TLS versions earlier than 1.2 have known vulnerabilities, so set the minimum version to 1.2. Currently the default in Go is 1.0.

@vdesousa Are you the right person for such queries? Could you have a look please?

I wonder if we have a document somewhere that lists the accepted ciphers, TLS version, and other related things that all our applications should conform to? I believe ensuring that such policy exists and is followed across the board is important to satisfy some compliance requirements.

Merge request reports