https://seclists.org/oss-sec/2024/q3/174: feedback quested garding depcation of TLS 1.0/1.1
Published Aug 7, 2024
·Updated
Affected Software
1 affected component
OpenSSL OpenSSL
Frequently Asked Questions
1
What is the status of the deprecation of TLS 1.0/1.1 in OpenSSL as per the message dated August 7, 2024?
The deprecation of TLS 1.0/1.1 will be explicitly implemented by disabling it at build time in the upcoming OpenSSL 4.0 release.
2
When is the OpenSSL 4.0 release that will disable TLS 1.0/1.1 scheduled?
The OpenSSL 4.0 release is tentatively scheduled to be released in the next 12-18 months from August 2024.
3
Will TLS 1.0/1.1 be completely removed from OpenSSL in future releases?
Yes, there are plans to completely remove the code related to TLS 1.0/1.1 in a future major release after OpenSSL 4.0.
4
What are the implications of disabling TLS 1.0/1.1 in OpenSSL?
Disabling TLS 1.0/1.1 will enhance security by removing support for outdated and insecure protocols.
5
What feedback is being sought regarding the deprecation of TLS 1.0/1.1 in OpenSSL?
Feedback is being requested concerning the proposal for the deprecation and any potential impacts or concerns stakeholders may have.