haskell-infra / hl

Haskell web site (old -- see new repo at https://github.com/haskell-infra/www.haskell.org)
http://haskell.org/
BSD 3-Clause "New" or "Revised" License
158 stars 92 forks source link

Enable at least TLS 1.1 on *.haskell.org sites #218

Closed wilx closed 6 years ago

wilx commented 6 years ago

I have recently started enforcing at least TLS 1.1 in Firefox and I noticed I can no longer connect to ghc.haskell.org through HTTPS. It has rather bad rating from SSL Server test: F. The SSL/TLS settings on the host should be improved.

gbaz commented 6 years ago

Thanks for the heads up - we’ve enabled better settings on ghc.h.org. There’s still something we need to configure in terms of CVE-2016-2107 apparently, but at least newer tls is enabled...