Stud version / Support for TLS 1.2

[thomasf1]

It seems the version of stud currently seems to not have updated in the last 3-4 years. Maybe it´s a good idea to switch to a fork under active development.

The key issue is Support for TLS 1.2 (the only SSL currently considered safe) without supporting SSLv3 (unsafe, should not be supported as it opens the door for attacks that try to have the connection fall back to SSLv3)

What do you guys think?

[thomasf1]

PS: That´s the issue discussion on stud: bumptech/stud#150

[arunoda]

Yes it is.
Use mupx. Now we are using nginx.
On 2015 ජූනි 12, සිකු at ප.ව. 5.10 Thomas [email protected] wrote:

It seems the version of stud currently seems to not have updated in the
last 3-4 years. Maybe it´s a good idea to switch to a fork under active
development.

The key issue is Support for TLS 1.2 (the only SSL currently considered
safe) without supporting SSLv3 (unsafe, should not be supported as it opens
the door for attacks that try to have the connection fall back to SSLv3)

What do you guys think?

—
Reply to this email directly or view it on GitHub
zodern/meteor-up#474.

[thomasf1]

PS: Current SSL issues that got flagged for our mup deployment...

[arunoda]

Yes it is.
That's why we fixed this with mupx. We are no longer maintaining mup.
On 2015 ජූනි 12, සිකු at ප.ව. 5.17 Thomas [email protected] wrote:

PS: Current SSL issues that got flagged for our mup deployment...
[image: screen shot 2015-06-12 at 13 46 18]
https://cloud.githubusercontent.com/assets/937467/8129444/836c3b60-1109-11e5-9927-6a8fefc5374e.png

—
Reply to this email directly or view it on GitHub
zodern/meteor-up#474 (comment).

[thomasf1]

Thanks, @arunoda :)

[avishaan]

@arunoda can you confirm mupx has TLS 1.2 support. I'm on this other thread zodern/meteor-up#819 and trying to get a definitive answer.