They will not remove it to allow backwards compatibility. They did however move it to Security Level 0 (https://www.openssl.org/news/openssl-3.0-notes.html#:~:text=SSL%203%2C%20TLS%201.0%2C%20TLS%201.1%2C%20and%20DTLS%201.0%20only%20work%20at%20security%20level%200%2C%20except%20when%20RSA%20key%20exchange%20without%20SHA1%20is%20used.)
This alone should show that they are moving forward to call it not secure. Thanks, Michael Irvine -----Original Message----- From: mailop <mailop-boun...@mailop.org> On Behalf Of Benny Pedersen via mailop Sent: Tuesday, May 21, 2024 09:26 To: mailop@mailop.org Subject: Re: [mailop] TLS inbound to comcast.net CAUTION: This email originated from outside of the organization. Do not click any links or open attachments unless you recognize the sender and know the content is safe. Serhii via mailop skrev den 2024-05-21 14:59: > https://datatracker.ietf.org/doc/rfc8996/ yet its still possible to enable sslv2, sslv3 on openssl :) i dont think openssl will remove support for any tls versions yet _______________________________________________ mailop mailing list mailop@mailop.org https://list.mailop.org/listinfo/mailop _______________________________________________ mailop mailing list mailop@mailop.org https://list.mailop.org/listinfo/mailop
