Were we outdated? I see we're using TLS 1.3 right now, and at least the certificate was last created/renewed before this post (created July 16, post on Aug 6). I know that's not really a metric, but my browser at least has the minimum TLS version set to 3, so I would absolutely have noticed if SJW used anything older.

I guess it's possible we allowed older TLS versions, but at least the version I'm connecting with is completely fine.

[–] [email protected] 3 points 1 year ago (1 children)

What about TLS 1.2?

[–] pastermil 4 points 1 year ago* (last edited 1 year ago) (1 children)

Should still be good for now

[–] xaera 2 points 1 year ago* (last edited 1 year ago)

Not really, here's why:

weak ciphers
SCSV (protocol fallback)

That's why I didn't go for that thankless job.