httpd-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Stefan Fritsch>
Subject Re: Improving SSL config
Date Sat, 19 Nov 2011 03:05:49 GMT
On Friday 18 November 2011, Kaspar Brand wrote:
>  "all" simply stands for "+SSLv3 +TLSv1",
> so we might just leave the default config as is - i.e., not have
> any SSLProtocol directive in docs/conf/extra/httpd-ssl.conf.

We may have "TLSv1.1" "and TLSv1.2" in the future. Changing the 
default config to an explicit list is bound to cause problems. +1 for 
keeping "all".

View raw message