Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Migration path to removing TLS 1.0 and 1.1 #4319

Closed
swankjesse opened this issue Oct 16, 2018 · 4 comments
Closed

Migration path to removing TLS 1.0 and 1.1 #4319

swankjesse opened this issue Oct 16, 2018 · 4 comments
Milestone

Comments

@swankjesse
Copy link
Collaborator

Browser vendors announced they’re phasing out obsolete versions of TLS in March 2020.
https://blog.mozilla.org/security/2018/10/15/removing-old-versions-of-tls/

In an early-2019 release we should flip MODERN_TLS to support this 2020 spec, and change COMPATIBLE_TLS to cover everything that was dropped.

@swankjesse swankjesse added this to the 3.12 milestone Oct 16, 2018
@yschimke
Copy link
Collaborator

Why milestone 3.12 based on above comments?

@swankjesse
Copy link
Collaborator Author

Using “next release” as a mechanism for “short list of things to consider for next release”, with the expectation that it’ll slip one or two. Gotta cut a release soon too.

@swankjesse
Copy link
Collaborator Author

... I created a new milestone “Backlog” for issues that we’ve triaged.

@swankjesse swankjesse modified the milestones: Backlog, 3.13 Dec 28, 2018
swankjesse pushed a commit that referenced this issue Dec 30, 2018
We no longer connect to TLSv1.0 or TLSv1.1 servers out-of-the-box; instead
it is necessary to enable COMPATIBLE_TLS in the OkHttpClient configuration.

This is in the path to later removing these TLS versions completely; that
is scheduled for March 2020 by some browsers.

#4319
swankjesse pushed a commit that referenced this issue Dec 30, 2018
We no longer connect to TLSv1.0 or TLSv1.1 servers out-of-the-box; instead
it is necessary to enable COMPATIBLE_TLS in the OkHttpClient configuration.

This is in the path to later removing these TLS versions completely; that
is scheduled for March 2020 by some browsers.

#4319
@swankjesse
Copy link
Collaborator Author

This step is done. Next step comes in 2020 with #4499!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants