Skip to content

Go 1.18 disables TLS 1.0 and TLS 1.1 for clients by default

As noted in Go 1.18 release notes, support for TLS 1.0 and TLS 1.1 will be disabled by default for clients.

It is possible to temporarily revert back to the old behaviour, but it will not be possible with Go 1.19 (for evident security reasons).

Note: this only affects clients, not servers

In reaction, we must:

  1. Keep the minimum version to TLS 1.0 for compatibility reasons if the admin has not set its own minimum version until go 1.19 is released
  2. Log a deprecation warning if TLS 1.0 or TLS 1.1 is used
  3. Document the deprecation and the TLS 1.2 minimum comming in a future release
Edited by Bruno Carlin
To upload designs, you'll need to enable LFS and have an admin enable hashed storage. More information