[
https://issues.apache.org/jira/browse/KAFKA-9460?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Nikolay Izhikov updated KAFKA-9460:
-----------------------------------
Labels: needs-kip (was: )
> Enable TLSv1.2 by default and disable all others protocol versions
> ------------------------------------------------------------------
>
> Key: KAFKA-9460
> URL: https://issues.apache.org/jira/browse/KAFKA-9460
> Project: Kafka
> Issue Type: Improvement
> Components: security
> Reporter: Nikolay Izhikov
> Assignee: Nikolay Izhikov
> Priority: Major
> Labels: needs-kip
>
> In KAFKA-7251 support of TLS1.3 was introduced.
> For now, only TLS1.2 and TLS1.3 are recommended for the usage, other versions
> of TLS considered as obsolete:
> https://www.rfc-editor.org/info/rfc8446
> https://en.wikipedia.org/wiki/Transport_Layer_Security#History_and_development
> But testing of TLS1.3 incomplete, for now.
> We should enable actual versions of the TLS protocol by default to provide to
> the users only secure implementations.
> Users can enable obsolete versions of the TLS with the configuration if they
> want to.
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
