Re: [nodejs] What's the proper way to disable "early TLS" (TLS 1.0) in node?

2016-04-18 Thread Arthur Blake
Thank you so much! It works. I wish this was in the API docs somewhere (I spent countless hours searching for this!) I would think having TLS 1.0 disabled (with 1.1 and 1.2 enabled) should soon be the default configuration for Node... TLS 1.0 seems reasonably secure (especially compared to SSLv2

Re: [nodejs] What's the proper way to disable "early TLS" (TLS 1.0) in node?

2016-04-15 Thread Ben Noordhuis
On Wed, Apr 13, 2016 at 3:41 AM, Arthur Blake wrote: > What's the proper way to disable "early TLS" (TLS 1.0) in node? Apparently > this is now required for PCI compliance on new websites - see >

[nodejs] What's the proper way to disable "early TLS" (TLS 1.0) in node?

2016-04-14 Thread Arthur Blake
What's the proper way to disable "early TLS" (TLS 1.0) in node? Apparently this is now required for PCI compliance on new websites - see https://www.pcisecuritystandards.org/documents/Migrating_from_SSL_Early_TLS_Information%20Supplement_v1.pdf -- Job board: http://jobs.nodejs.org/ New group