Safe but, in my opinion, fundamentally rather unhelpful as it keeps people on a deprecated version of the TLS protocol by default. I don't think it's the right choice on balance.
Instead of failing to start if you feel that is too severe, you are still able to limit to TLS 1.0 only. < 1.46, force TLS 1.0 going forward < 1.53, always disable TLS 1.2 going forward Else... TLS 1.2 will be enabled by default. Thoughts? Nick _______________________________________________ radiator mailing list radiator@open.com.au http://www.open.com.au/mailman/listinfo/radiator