Open lassik opened 3 years ago
Anything older than TLS 1.2 is insecure and deprecated. (TLS 1.1 is not insecure in itself, but it will cheerfully and without notice fall back to SSL 2.0, which is insecure.)
Is any protocol that goes by the name "SSL" still relevant?
Definitely not.
Once a connection has been established, we should have a procedure to ask which ciphers and TLS version were selected for it (out of the set of all acceptable ones).
$ openssl list-cipher-algorithms
https://curl.haxx.se/docs/ssl-ciphers.html