httpd-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Eric Covener <cove...@gmail.com>
Subject Re: Improving SSL config
Date Sat, 19 Nov 2011 03:08:26 GMT
On Fri, Nov 18, 2011 at 10:05 PM, Stefan Fritsch <sf@sfritsch.de> wrote:
> On Friday 18 November 2011, Kaspar Brand wrote:
>>  "all" simply stands for "+SSLv3 +TLSv1",
>> so we might just leave the default config as is - i.e., not have
>> any SSLProtocol directive in docs/conf/extra/httpd-ssl.conf.
>
> We may have "TLSv1.1" "and TLSv1.2" in the future. Changing the
> default config to an explicit list is bound to cause problems. +1 for
> keeping "all".

was concerned about this as well.

Mime
View raw message