Rejecting TLS 1.0 / 1.1 for inbound ACME connections

In 2022, we started returning an error message to TLS 1.0 and 1.1 requests. We will now stop supporting TLS 1.0 and 1.1 entirely, so clients will get a more obscure error. For example, clients using OpenSSL may get an error like "SSL routines::no protocols available".

This change has been made in staging already, and will be made in production tomorrow.

We expect this to have no impact, as these old TLS protocols are already unsupported.

11 Likes