[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: Getting SSL test A+ grade on elpa.gnu.org
|
From: |
Robert Pluim |
|
Subject: |
Re: Getting SSL test A+ grade on elpa.gnu.org |
|
Date: |
Wed, 25 Nov 2020 18:04:14 +0100 |
김민우 <kmwyard@gmail.com> writes:
> elpa.gnu.org is supporting insecure TLS 1.0 and TLS 1.1, and does not
> support Forward Secrecy on every device, so It got a B grade on Qualys
> Labs' SSL Test (
> https://www.ssllabs.com/ssltest/analyze.html?d=elpa.gnu.org&s=209.51.188.89&latest).
> It could have a bad effect on security and privacy for emacs users. Would
> you apply only TLS 1.3 on elpa.gnu.org?
*only* TLS 1.3 would be a bit harsh, I think.
Robert