2026-07-30 21:06 UTC
Replies (4)
-
@cshishido@infosec.exchange 2026-07-30 21:47
@nygren@hachyderm.io I always say TLS when I mean TLS 1.2 or higher. If a vendor or customer is using SSL loosely I ask if they mean TLS 1.2 or 1.3. It sets a technical baseline and still allows for talking about older historical usage or when looking for insecure certificates on a network.
-
@pavlov112@hachyderm.io 2026-07-30 22:35
@nygren@hachyderm.io OpenSSL has a sad now.
-
@damien@layer8.space 2026-07-31 05:52
@nygren@hachyderm.io do you use TLS certificates though?
-
@kasperd@westergaard.social 2026-07-30 22:00
So how do you feel about software that makes a distinction between SSL and TLS in the configuration and assigns the following meaning to the two: SSL - Open a TCP connection and immediately initiate a TLS handshake TLS - Open an initially unenecrypted TCP connection and then attempt to use a STARTTLS command to upgrade to encrypted communication.