Go 1.18 disables TLS 1.0 and TLS 1.1 for clients by default
As noted in Go 1.18 release notes, support for TLS 1.0 and TLS 1.1 will be disabled by default for clients.
It is possible to temporarily revert back to the old behaviour, but it will not be possible with Go 1.19 (for evident security reasons).
Note: this only affects clients, not servers
In reaction, we must:
- Keep the minimum version to TLS 1.0 for compatibility reasons if the admin has not set its own minimum version until go 1.19 is released
- Log a deprecation warning if TLS 1.0 or TLS 1.1 is used
- Document the deprecation and the TLS 1.2 minimum comming in a future release
Edited by Bruno Carlin