https://seclists.org/oss-sec/2024/q3/157: feedback quested garding depcation of TLS 1.0/1.1
Published Aug 6, 2024
·Updated
Affected Software
2 affected components
OpenSSL OpenSSL
Python Cryptographic Authority cryptography
Frequently Asked Questions
1
What is the impact of the vulnerability related to deprecation of TLS 1.0/1.1 in OpenSSL?
The deprecation of TLS 1.0/1.1 in OpenSSL affects compatibility with legacy systems and may lead to unsupported configurations.
2
How does the deprecation of TLS 1.0/1.1 affect the Python Cryptographic Authority's cryptography library?
The deprecation aligns with the Python Cryptographic Authority's commitment to enhance security by ensuring future updates will not support TLS 1.0/1.1.
3
What versions of TLS are recommended after the deprecation of TLS 1.0/1.1 in OpenSSL?
Post-deprecation, it is recommended to use TLS 1.2 or higher for better security practices.
4
What steps should be taken to migrate from TLS 1.0/1.1 after OpenSSL's deprecation?
Users should update their configurations and libraries to support TLS 1.2 or higher and test compatibility with their systems.
5
When will TLS 1.0/1.1 officially be deprecated in OpenSSL?
TLS 1.0/1.1 is set to be deprecated in OpenSSL as of the announcement made in August 2024.