Received: from malur.postgresql.org ([217.196.149.56]) by arkaria.postgresql.org with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1lP33S-00025n-EO for pgsql-docs@arkaria.postgresql.org; Wed, 24 Mar 2021 12:56:10 +0000 Received: from localhost ([127.0.0.1] helo=malur.postgresql.org) by malur.postgresql.org with esmtp (Exim 4.92) (envelope-from ) id 1lP33R-0008KO-09 for pgsql-docs@arkaria.postgresql.org; Wed, 24 Mar 2021 12:56:09 +0000 Received: from makus.postgresql.org ([2001:4800:3e1:1::229]) by malur.postgresql.org with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1lP33Q-0008KD-Qs for pgsql-docs@lists.postgresql.org; Wed, 24 Mar 2021 12:56:08 +0000 Received: from meldrar.postgresql.org ([2a02:c0:301:0:ffff::31]) by makus.postgresql.org with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1lP33L-0005T1-8y for pgsql-docs@lists.postgresql.org; Wed, 24 Mar 2021 12:56:07 +0000 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=postgresql.org; s=20171124; h=Content-Type:In-Reply-To:MIME-Version:Date: Message-ID:From:References:To:Subject:Sender:Reply-To:Cc: Content-Transfer-Encoding:Content-ID:Content-Description; bh=iI4jNxxn8InvC83nstX2dHXkHl+k6Bcxek19QddbQuE=; b=GcJtHoIqv7Lnqt1swKUqmQFYDV O45TeDkICWVZmNCJcZ3TEfhdcjouRw32BmVZX8d60wA7Uouyj1sdGCcUFnpQ9Gpqcg3JWR4L1qaNM ROhAi+UQN841rr0BfzSLnrmZ8A6B0NjbhJZYXs296iHrDEAEb/vAaY9nHJ/y2AAKLFOnMxByRBb3M UMYbLCSoYUTvc2sRnLqoNtAISHA25SMb3INKYPzw1l61RDF01i1Ag5Z8IMjOnnHHSpec+nmenum1l I6ufW9sgXnHtEPdbsoeKeP1OBlRHgM7hE48UZGWkq9v1jNWrfC98AGO9WzZ2t0g0h4Nce4D/sMM9N OIDgRRjw==; Received: from [70.19.69.80] (helo=[192.168.1.153]) by meldrar.postgresql.org with esmtpsa (TLS1.3:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.92) (envelope-from ) id 1lP33H-0005L1-G7; Wed, 24 Mar 2021 12:56:01 +0000 Subject: Re: Update to reflect that TLS1 and TLSv1.1 are now deprecated To: Daniel Gustafsson , Pg Docs References: <3E4FA090-C2D7-4F98-B114-FF875013EFBC@yesql.se> From: "Jonathan S. Katz" Message-ID: <34f25e9d-588e-c0b4-c1f2-57b80476a180@postgresql.org> Date: Wed, 24 Mar 2021 08:55:57 -0400 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.16; rv:78.0) Gecko/20100101 Thunderbird/78.8.1 MIME-Version: 1.0 In-Reply-To: <3E4FA090-C2D7-4F98-B114-FF875013EFBC@yesql.se> Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="ZQtiP6HWxtXiHOaoKXPzhgLXGuPAsfcjJ" X-Host-Lookup-Failed: Reverse DNS lookup failed for 70.19.69.80 (failed) List-Id: List-Help: List-Subscribe: List-Post: List-Owner: List-Archive: Archived-At: Precedence: bulk This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --ZQtiP6HWxtXiHOaoKXPzhgLXGuPAsfcjJ Content-Type: multipart/mixed; boundary="OD7qYuNqwseGGuBbJBb79S2wVc5JBFHvf"; protected-headers="v1" From: "Jonathan S. Katz" To: Daniel Gustafsson , Pg Docs Message-ID: <34f25e9d-588e-c0b4-c1f2-57b80476a180@postgresql.org> Subject: Re: Update to reflect that TLS1 and TLSv1.1 are now deprecated References: <3E4FA090-C2D7-4F98-B114-FF875013EFBC@yesql.se> In-Reply-To: <3E4FA090-C2D7-4F98-B114-FF875013EFBC@yesql.se> --OD7qYuNqwseGGuBbJBb79S2wVc5JBFHvf Content-Type: text/plain; charset=windows-1252 Content-Language: en-US Content-Transfer-Encoding: quoted-printable On 3/24/21 5:49 AM, Daniel Gustafsson wrote: > The recently published RFC 8996 deprecates the use of TLSv1 and TLSv1.1= , the > attached rewords where we say our default of 1.2 is industry best pract= ice with > a link to the authoritative source. I would s/as of/stated in/ and add a comma after RFC 8996, but otherwise +1 from me. Jonathan --OD7qYuNqwseGGuBbJBb79S2wVc5JBFHvf-- --ZQtiP6HWxtXiHOaoKXPzhgLXGuPAsfcjJ Content-Type: application/pgp-signature; name="OpenPGP_signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="OpenPGP_signature" -----BEGIN PGP SIGNATURE----- wsF5BAABCAAjFiEE+oS2la8r95ogZD/x8QSccp8cZScFAmBbNt0FAwAAAAAACgkQ8QSccp8cZSf7 eRAAmHGXpKpNCvmDLNcjAJFPW3jRWwrkBZgAgXkSMWZ6PUgCC7lwAjgL84CXKO4VwOYxrqHjHw/X c0Vh3gPMhkz6kDsZbnhm3+OWto794GPfD5K+yWyEu1BdX5XbXD9eB9Ti1WYAksnFOqmpPlwoLsGl KqKhZQok8GmwzRAn2YxTVSb96XSRL+rPC6o0uJszuWMaMON204gR5vhjCDOmafoTbsYeKkKv+aro fcMbkw4SXD72TWcMb9gwVUSSbEBxjsmpJeHzQLTZjTuo/b1uZbaeMIXRfBadKGSyFdgSl0IE1bFa S4ZJgPw8ZiQmjXxP4pcJflPdD8oysmyzU9RKJ/UDbKNRHVzZm66kCkRPlXkWYqfGzAozgFg5xRG6 lWx+iUrBBPc+cwoJLnIUP1qAR1MQ7by7rfhDi0zze+dhbBZgJq+kF+RyH69l3uhaSlIyiEuzgetp ofnjg5gXphzqHvwGr+X8nQnwSyJiX8iikIvd+47d7ppc8pIaJNfjELtK18AsxVUMPRogJUy1QJRi bXQAjSuLkP0YEBXjg5EzNkKhp11fOMx03X4hrp2g9t/5kwBBIxDwPMKqLG+hI5PccahqtahOq8NF 7ZiylKm+aESuFV+5g2NRPpA2BkD1zE0r/TfWjTjg6HTErNPt2hTD6T5p+afkIYpireYDV7jAgcU1 2kw= =kCCA -----END PGP SIGNATURE----- --ZQtiP6HWxtXiHOaoKXPzhgLXGuPAsfcjJ--