#991562 nss: Disable TLS below 1.2 by default

Package:
src:nss
Source:
nss
Submitter:
Paride Legovini
Date:
2021-08-02 17:21:08 UTC
Severity:
normal
Tags:
#991562#5
Date:
2021-07-27 16:54:28 UTC
From:
To:
To keep NSS in sync with the current security standards and
expectations, and consistent to what OpenSSL now does, I think NSS
should disable TLS below 1.2 by default.

This is already done in Ubuntu, attached is the patch that implements
the change.

Thanks!

Paride