pg.ddx.io  pgsql-docs@postgresql.org mailing list archive  

help / color / mirror / Atom feed

From: Daniel Gustafsson <daniel@yesql.se>
To: Pg Docs <pgsql-docs@lists.postgresql.org>
Subject: Update to reflect that TLS1 and TLSv1.1 are now deprecated
Date: Wed, 24 Mar 2021 10:49:27 +0100
Message-ID: <3E4FA090-C2D7-4F98-B114-FF875013EFBC@yesql.se> (raw)

The recently published RFC 8996 deprecates the use of TLSv1 and TLSv1.1, the
attached rewords where we say our default of 1.2 is industry best practice with
a link to the authoritative source.

--
Daniel Gustafsson		https://vmware.com/

Attachments:

rfc_8996.diff (application/octet-stream, 1.3K) download
diff --git a/doc/src/sgml/config.sgml b/doc/src/sgml/config.sgml
index 1f0e0fc1fb..12a9e28018 100644
--- a/doc/src/sgml/config.sgml
+++ b/doc/src/sgml/config.sgml
@@ -1433,7 +1433,10 @@ include_dir 'conf.d'
 
        <para>
         The default is <literal>TLSv1.2</literal>, which satisfies industry
-        best practices as of this writing.
+        best practices as of 
+        <ulink url="https://tools.ietf.org/html/rfc8996">RFC 8996</ulink>
+        which deprecates <literal>TLSv1</literal> and
+        <literal>TLSv1.1</literal>.
        </para>
       </listitem>
      </varlistentry>
diff --git a/doc/src/sgml/libpq.sgml b/doc/src/sgml/libpq.sgml
index be674fbaa9..d701421ca2 100644
--- a/doc/src/sgml/libpq.sgml
+++ b/doc/src/sgml/libpq.sgml
@@ -1811,7 +1811,10 @@ postgresql://%2Fvar%2Flib%2Fpostgresql/dbname
         version of <productname>OpenSSL</productname> used, older versions
         not supporting the most modern protocol versions. If not specified,
         the default is <literal>TLSv1.2</literal>, which satisfies industry
-        best practices as of this writing.
+        best practices as of 
+        <ulink url="https://tools.ietf.org/html/rfc8996">RFC 8996</ulink>
+        which deprecates <literal>TLSv1</literal> and
+        <literal>TLSv1.1</literal>.
        </para>
       </listitem>
      </varlistentry>

view thread (4+ messages)  latest in thread

Message-ID: <3E4FA090-C2D7-4F98-B114-FF875013EFBC@yesql.se>
Permalink:  ../3E4FA090-C2D7-4F98-B114-FF875013EFBC@yesql.se/
Also on:    postgresql.org/message-id/3E4FA090-C2D7-4F98-B114-FF875013EFBC@yesql.se

copy link · copy postgr.es · copy git am

reply

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Reply to all the recipients using the --to and --cc options:
  reply via email

  To: pgsql-docs@postgresql.org
  Cc: daniel@yesql.se, pgsql-docs@lists.postgresql.org
  Subject: Re: Update to reflect that TLS1 and TLSv1.1 are now deprecated
  In-Reply-To: <3E4FA090-C2D7-4F98-B114-FF875013EFBC@yesql.se>

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox