Severity: Best Practice
Invicti detected that a deprecated, insecure transportation security protocol (TLS 1.1) is supported by your web server.
TLS 1.1 will be considered as deprecated by major web browsers (i.e. Chrome, Firefox, Safari, Edge, Internet Explorer) starting in 2020.
Your website will be inaccessible due to web browser deprecation.
We recommended to disable TLS 1.1 and replace it with TLS 1.2 or higher. See Remedy section for more details.
Configure your web server to disallow using weak ciphers. You need to restart the web server to enable changes.
nginx.conffile and remove
regedit, and then click OK.
Serveror create if it doesn't exist.
Serverkey, locate a DWORD value named
Enabledor create if it doesn't exist and set its value to "0".
ssl.use-sslv2 = "disable" ssl.use-sslv3 = "disable" ssl.openssl.ssl-conf-cmd = ("Protocol" => "-TLSv1.1, -TLSv1, -SSLv3") # v1.4.48 or up ssl.ec-curve = "secp384r1"