ijuma commented on a change in pull request #8695:
URL: https://github.com/apache/kafka/pull/8695#discussion_r433987384
##########
File path: clients/src/main/java/org/apache/kafka/common/config/SslConfigs.java
##########
@@ -64,7 +66,17 @@
public static final String SSL_ENABLED_PROTOCOLS_CONFIG =
"ssl.enabled.protocols";
public static final String SSL_ENABLED_PROTOCOLS_DOC = "The list of
protocols enabled for SSL connections.";
Review comment:
How about:
```
The list of protocols enabled for SSL connections. The default is
'TLSv1.2,TLSv1.3' when running with Java 11 or newer, 'TLSv1.2' otherwise. With
the default value for Java 11, clients and servers will prefer TLSv1.3 if both
support it and fallback to TLSv1.2 otherwise (assuming both support at least
TLSv1.2). This default should be fine for most cases. Also see the
`ssl.protocol` config documentation.
```
----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
For queries about this service, please contact Infrastructure at:
us...@infra.apache.org
