Timeline for Benefit to disabling TLS1.1 and TLS1.2?
Current License: CC BY-SA 3.0
7 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Nov 21, 2015 at 4:53 | comment | added | dave_thompson_085 | For Java, also of some importance server-side, Java7 in mid-2011 added 1.1 and 1.2. And also an ECC provider, enabling ECDHE (and other ECDH). | |
| Apr 10, 2015 at 3:13 | comment | added | Steffen Ullrich | First, 1.0.1 had to mature a bit. And first users were burned by the Heartbleed attack. Then even three years is not a long time in terms of updates to IT infrastructure. This excludes RHEL5 (Redhat) which is heavily used and still supported for years. And with larger installations you do not simple upgrade a part because there are lots of unexpected things which might break or need to be reconfigured. Combine this with a shortage of qualified IT personal and you can see why you even still finds lot of Windows XP installations and companies rather pay for extended support. | |
| Apr 10, 2015 at 0:02 | comment | added | user1207217 | You say that TLS 1.1 and 1.2 were "only" added in OpenSSL three years ago, but that is a really long time. And thats considering that OpenSSL is late to the party in that time to implement them as well... | |
| Apr 7, 2015 at 22:00 | history | edited | Steffen Ullrich | CC BY-SA 3.0 |
added 115 characters in body
|
| Apr 7, 2015 at 21:36 | history | edited | Steffen Ullrich | CC BY-SA 3.0 |
added 123 characters in body
|
| Apr 7, 2015 at 21:30 | history | edited | Steffen Ullrich | CC BY-SA 3.0 |
added 123 characters in body
|
| Apr 7, 2015 at 21:22 | history | answered | Steffen Ullrich | CC BY-SA 3.0 |