Ravi Sir's Cyber Security Cards › Interview Cards
Why disable old TLS versions?
Why disable old TLS versions? Old TLS and SSL versions have known weaknesses, so you turn them off and use TLS 1.2/1.3 . Configure strong ciphers and test the result with a lab scanner. “I allow only TLS 1.2 and 1.3 with strong ciphers, then verify with a tool.” An old protocol can let an attacker d
Read card text
What this card says
Short answer
Old TLS and SSL versions have known weaknesses, so you turn them off and use TLS 1.2/1.3.
Example
Configure strong ciphers and test the result with a lab scanner.
Say it in the interview
“I allow only TLS 1.2 and 1.3 with strong ciphers, then verify with a tool.”
Why it matters
An old protocol can let an attacker downgrade and read traffic.
Learn more in the lesson: 46.8 SOC, IR, Hardening and Cryptography Questions