Set default minimum protocol to TLS 1.2

sfackler / rust-native-tls

Apache License 2.0

468 stars 197 forks source link

Set default minimum protocol to TLS 1.2 #293

Open Property404 opened 3 months ago

Property404 commented 3 months ago

TLS 1.0 (published 1999) and 1.1 (published 2006) have been deprecated since 2021 (RFC 8996) and are no longer considered secure.

I think this could be considered a breaking change

sfackler commented 3 months ago

I think it's probably best to just make the change rather than cutting a major break. I expect most of the TLS backends people are using under native-tls have already turned off support for 1.0 and 1.1.

Property404 commented 3 months ago

@sfackler Do you need anything from me to get this merged?