4 points

I’ll take a look at our configs tomorrow 👍

permalink
report
reply
1 point
*

Were we outdated? I see we’re using TLS 1.3 right now, and at least the certificate was last created/renewed before this post (created July 16, post on Aug 6). I know that’s not really a metric, but my browser at least has the minimum TLS version set to 3, so I would absolutely have noticed if SJW used anything older.

I guess it’s possible we allowed older TLS versions, but at least the version I’m connecting with is completely fine.

permalink
report
parent
reply
3 points

What about TLS 1.2?

permalink
report
reply
4 points
*

Should still be good for now

permalink
report
parent
reply
2 points
*

Not really, here’s why:

  • weak ciphers
  • SCSV (protocol fallback)

That’s why I didn’t go for that thankless job.

permalink
report
parent
reply

sh.itjust.works Main Community

!main@sh.itjust.works

Create post

Home of the sh.itjust.works instance.

Community stats

  • 866

    Monthly active users

  • 433

    Posts

  • 11K

    Comments