Open orangepizza opened 4 years ago
BTW, this is gated on upgrading the underlying operating system to Ubuntu 18 and having a newer nginx.
if we can't update those, ca we at least depricate them? it's already outdated and not represent current Mozilla policy
it got updated to use only use TLS 1.3, but currently mozilla-modern.badssl.com only use tls 1.2 so it clearly not set to current version of 'modern' configuration. so it need to updated. actually, it looks like pushed though a level down ( old modern-> intermediate, old intermediate -> now old ) https://wiki.mozilla.org/Security/Server_Side_TLS#Modern_compatibility