enable TLS >1.0 about areweslimyet

[EricRahm]

@ximex I'm not sure this request applies to AWSY. Are you attempting to report a bug for Firefox? If so please file a bug in bugzilla under Core :: Networking.

[ximex]

@EricRahm no this isn't a firefox bug.

security.tls.version.min sets the min. allowed TLS version in firefox.
0 = SSL 3.0
1 = TLS 1.0
2 = TLS 1.1
3 = TLS 1.2

this means: if i set it to 2 my browser only accept TLS 1.1 and higher. The error message from firefox means that he couldn't get a connection with TLS 1.1 or higher.

So i want that you ship also TLS 1.1 and 1.2. It should be only a config change in apache or in other webservers.

[EricRahm]

I see, so this is a request for website itself: https://areweslimyet.com

@Nephyrin Do you know if our website server can support TLS 1.1 or higher?

[ximex]

exactly
if you use apache, this should help you: http://httpd.apache.org/docs/2.2/mod/mod_ssl.html#sslprotocol
This is a good config for apache:
SSLProtocol All -SSLv2 -SSLv3
So only TLS 1.0 or higher is allowed

Maybe this is also helpful:
https://bettercrypto.org/
This a manual with many infos how you could get your security higher

[Nephyrin]

This is currently on a box running an older distro that doesn't support >1.0 out of the box, hence the lack thereof. I have a few new systems I've been slowly migrating things to, once I move the AWSY mirror over TLS 1.2 should come with for free.

[ximex]

nice
is there a date when this will be done?
this is one of the last websites that i can disable tls 1.0 ;-)

[ximex]

any updates?