If you run a server, website email server etc - check TLS/SSL - GoFuckYourself.com

bigalownz · 02-01-2020, 05:01 AM

as some might know already

if you use a ssl cert on your site etc TLS 1.0 & TLS 1.1 encryption is no longer supported ,

(SSL 1.0, 2.0 was unsupported since 2011 and SSL 3.0 was unsupported since 2015 ) you shouldn't of been using this encryption at all

TLS 1.2 & TLS 1.3 are ok

and from January 2020 will be starting to remove TLS 1.0 & TLS 1.1 from most browsers and fully be removed by March 2020

https://www.ssllabs.com/ssltest/ is a good site to test your site etc

https://wiki.mozilla.org/Security/Server_Side_TLS is good site to show how to change your settings

NatalieMojoHost · 02-03-2020, 05:26 AM

Appreciate the heads up, thanks!

Klen · 02-03-2020, 07:29 AM

Ok but what exactly need to be done to upgrade on most popular os-es like debian and cent os ?

Grapesoda · 02-03-2020, 08:25 AM

Quote:

Originally Posted by bigalownz

as some might know already

if you use a ssl cert on your site etc TLS 1.0 & TLS 1.1 encryption is no longer supported ,

(SSL 1.0, 2.0 was unsupported since 2011 and SSL 3.0 was unsupported since 2015 ) you shouldn't of been using this encryption at all

TLS 1.2 & TLS 1.3 are ok

and from January 2020 will be starting to remove TLS 1.0 & TLS 1.1 from most browsers and fully be removed by March 2020

https://www.ssllabs.com/ssltest/ is a good site to test your site etc

https://wiki.mozilla.org/Security/Server_Side_TLS is good site to show how to change your settings

get the word out to Hillary

bigalownz · 02-04-2020, 01:23 AM

you will be surprise

how many sites use so called IT companies and there sites still use ssl 2.0 3.0 and they pay them $1000's

bigalownz · 02-04-2020, 01:24 AM

Quote:

Originally Posted by Klen

Ok but what exactly need to be done to upgrade on most popular os-es like debian and cent os ?

you can also use this site

https://ssl-config.mozilla.org/

Klen · 02-04-2020, 03:47 AM

Quote:

Originally Posted by bigalownz

you will be surprise

how many sites use so called IT companies and there sites still use ssl 2.0 3.0 and they pay them $1000's

Well, there is still a lot of companies on Windows XP so

PornDiscounts-V · 02-05-2020, 08:51 AM

Quote:

Originally Posted by Klen

Well, there is still a lot of companies on Windows XP so

Why discount those on WindowsME?

I miss Bob!

rowan · 02-05-2020, 05:14 PM

As a consumer, I think it's good practice to disallow TLS 1.0/TLS 1.1 now, so you can clearly see when a site hasn't had its security config updated since before 2008 (when TLS 1.2 was introduced)

Firefox is now warning people anyway. If the site only supports 1.0/1.1, it throws up a dialog and asks if you want to make an exception. (Unfortunately it seems to be a global config thing, not on a per-site basis, so you have to go and manually unset it later)

I've personally only run across a handful of sites that don't support TLS 1.2+, but one of them handles CC info. Pretty dodgy.

bigalownz · 03-27-2020, 03:20 AM

bump bump

this a good time to do this !!!

bigalownz · 11-25-2020, 03:50 AM

bump bump

02-01-2020, 05:01 AM	#1
bigalownz Confirmed User Industry Role: Join Date: Aug 2005 Location: NEW ZEALAND Posts: 1,657	If you run a server, website email server etc - check TLS/SSL as some might know already if you use a ssl cert on your site etc TLS 1.0 & TLS 1.1 encryption is no longer supported , (SSL 1.0, 2.0 was unsupported since 2011 and SSL 3.0 was unsupported since 2015 ) you shouldn't of been using this encryption at all TLS 1.2 & TLS 1.3 are ok and from January 2020 will be starting to remove TLS 1.0 & TLS 1.1 from most browsers and fully be removed by March 2020 https://www.ssllabs.com/ssltest/ is a good site to test your site etc https://wiki.mozilla.org/Security/Server_Side_TLS is good site to show how to change your settings __________________ $100 free credit for all hosting needs

02-03-2020, 05:26 AM	#2
NatalieMojoHost Confirmed User Industry Role: Join Date: Aug 2013 Posts: 1,474	Appreciate the heads up, thanks! __________________ MojoHost.COM \| natalie at mojohost dot com \| Skype natalie.ac \| Telegram @znatalie. Since 1999: 70 Adult Industry awards for Best Hosting Company and professional excellence.

02-04-2020, 01:23 AM	#5
bigalownz Confirmed User Industry Role: Join Date: Aug 2005 Location: NEW ZEALAND Posts: 1,657	you will be surprise how many sites use so called IT companies and there sites still use ssl 2.0 3.0 and they pay them $1000's __________________ $100 free credit for all hosting needs

03-27-2020, 03:20 AM	#10
bigalownz Confirmed User Industry Role: Join Date: Aug 2005 Location: NEW ZEALAND Posts: 1,657	bump bump this a good time to do this !!! __________________ $100 free credit for all hosting needs

11-25-2020, 03:50 AM	#11
bigalownz Confirmed User Industry Role: Join Date: Aug 2005 Location: NEW ZEALAND Posts: 1,657	bump bump __________________ $100 free credit for all hosting needs

02-03-2020, 07:29 AM	#3
Klen Industry Role: Join Date: Aug 2006 Location: Little Vienna Posts: 32,235	Ok but what exactly need to be done to upgrade on most popular os-es like debian and cent os ?

02-05-2020, 05:14 PM	#9
rowan Too lazy to set a custom title Join Date: Mar 2002 Location: Australia Posts: 17,393	As a consumer, I think it's good practice to disallow TLS 1.0/TLS 1.1 now, so you can clearly see when a site hasn't had its security config updated since before 2008 (when TLS 1.2 was introduced) Firefox is now warning people anyway. If the site only supports 1.0/1.1, it throws up a dialog and asks if you want to make an exception. (Unfortunately it seems to be a global config thing, not on a per-site basis, so you have to go and manually unset it later) I've personally only run across a handful of sites that don't support TLS 1.2+, but one of them handles CC info. Pretty dodgy.