Received: from malur.postgresql.org ([217.196.149.56]) by arkaria.postgresql.org with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1lP08s-0003QJ-Oy for pgsql-docs@arkaria.postgresql.org; Wed, 24 Mar 2021 09:49:34 +0000 Received: from localhost ([127.0.0.1] helo=malur.postgresql.org) by malur.postgresql.org with esmtp (Exim 4.92) (envelope-from ) id 1lP08r-0002Fn-DJ for pgsql-docs@arkaria.postgresql.org; Wed, 24 Mar 2021 09:49:33 +0000 Received: from magus.postgresql.org ([2a02:c0:301:0:ffff::29]) by malur.postgresql.org with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1lP08r-0002Fg-7O for pgsql-docs@lists.postgresql.org; Wed, 24 Mar 2021 09:49:33 +0000 Received: from smtp.outgoing.loopia.se ([93.188.3.37]) by magus.postgresql.org with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1lP08o-0007PL-Jn for pgsql-docs@lists.postgresql.org; Wed, 24 Mar 2021 09:49:32 +0000 Received: from s807.loopia.se (localhost [127.0.0.1]) by s807.loopia.se (Postfix) with ESMTP id A0A6E2461FFF for ; Wed, 24 Mar 2021 10:49:28 +0100 (CET) Received: from s498.loopia.se (unknown [172.22.191.5]) by s807.loopia.se (Postfix) with ESMTP id 9203C2E279D3 for ; Wed, 24 Mar 2021 10:49:28 +0100 (CET) Received: from s470.loopia.se (unknown [172.22.191.6]) by s498.loopia.se (Postfix) with ESMTP id 8CD00489437 for ; Wed, 24 Mar 2021 10:49:28 +0100 (CET) X-Virus-Scanned: amavisd-new at amavis.loopia.se X-Spam-Flag: NO X-Spam-Score: -1 X-Spam-Level: X-Spam-Status: No, score=-1 tagged_above=-999 required=6.2 tests=[ALL_TRUSTED=-1] autolearn=disabled Received: from s645.loopia.se ([172.22.191.5]) by s470.loopia.se (s470.loopia.se [172.22.190.10]) (amavisd-new, port 10024) with LMTP id hYnC3aP91x2w for ; Wed, 24 Mar 2021 10:49:28 +0100 (CET) X-Loopia-Auth: user X-Loopia-User: daniel@yesql.se X-Loopia-Originating-IP: 89.255.232.193 Received: from [192.168.72.43] (customer-89-255-232-193.stosn.net [89.255.232.193]) (Authenticated sender: daniel@yesql.se) by s645.loopia.se (Postfix) with ESMTPSA id 1585F1579FBA for ; Wed, 24 Mar 2021 10:49:28 +0100 (CET) From: Daniel Gustafsson Content-Type: multipart/mixed; boundary="Apple-Mail=_CFAC0EAE-9822-4803-9132-C3B85E029E8E" Mime-Version: 1.0 (Mac OS X Mail 12.4 \(3445.104.17\)) Subject: Update to reflect that TLS1 and TLSv1.1 are now deprecated Message-Id: <3E4FA090-C2D7-4F98-B114-FF875013EFBC@yesql.se> Date: Wed, 24 Mar 2021 10:49:27 +0100 To: Pg Docs X-Mailer: Apple Mail (2.3445.104.17) List-Id: List-Help: List-Subscribe: List-Post: List-Owner: List-Archive: Archived-At: Precedence: bulk --Apple-Mail=_CFAC0EAE-9822-4803-9132-C3B85E029E8E Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=us-ascii The recently published RFC 8996 deprecates the use of TLSv1 and TLSv1.1, = the attached rewords where we say our default of 1.2 is industry best = practice with a link to the authoritative source. -- Daniel Gustafsson https://vmware.com/ --Apple-Mail=_CFAC0EAE-9822-4803-9132-C3B85E029E8E Content-Disposition: attachment; filename=rfc_8996.diff Content-Type: application/octet-stream; x-unix-mode=0644; name="rfc_8996.diff" Content-Transfer-Encoding: 7bit diff --git a/doc/src/sgml/config.sgml b/doc/src/sgml/config.sgml index 1f0e0fc1fb..12a9e28018 100644 --- a/doc/src/sgml/config.sgml +++ b/doc/src/sgml/config.sgml @@ -1433,7 +1433,10 @@ include_dir 'conf.d' The default is TLSv1.2, which satisfies industry - best practices as of this writing. + best practices as of + RFC 8996 + which deprecates TLSv1 and + TLSv1.1. diff --git a/doc/src/sgml/libpq.sgml b/doc/src/sgml/libpq.sgml index be674fbaa9..d701421ca2 100644 --- a/doc/src/sgml/libpq.sgml +++ b/doc/src/sgml/libpq.sgml @@ -1811,7 +1811,10 @@ postgresql://%2Fvar%2Flib%2Fpostgresql/dbname version of OpenSSL used, older versions not supporting the most modern protocol versions. If not specified, the default is TLSv1.2, which satisfies industry - best practices as of this writing. + best practices as of + RFC 8996 + which deprecates TLSv1 and + TLSv1.1. --Apple-Mail=_CFAC0EAE-9822-4803-9132-C3B85E029E8E--