block tls 1.0 and 1.1 (#26)

NuGet · Dec 3, 2020 · 8251b2d · 8251b2d
1 parent fdae439
commit 8251b2d
Showing 1 changed file with 3 additions and 1 deletion.
diff --git a/src/NuGet.Licenses/Global.asax.cs b/src/NuGet.Licenses/Global.asax.cs
@@ -54,8 +54,10 @@ private static void SetupInstrumentation()
 
         private static void SetupSsl()
         {
-            // Ensure that SSLv3 is disabled and that Tls v1.2 is enabled.
+            // Ensure that SSLv3 is disabled and that TLS v1.2 is the minimum TLS version.
             ServicePointManager.SecurityProtocol &= ~SecurityProtocolType.Ssl3;
+            ServicePointManager.SecurityProtocol &= ~SecurityProtocolType.Tls;
+            ServicePointManager.SecurityProtocol &= ~SecurityProtocolType.Tls11;
             ServicePointManager.SecurityProtocol |= SecurityProtocolType.Tls12;
         }