Add option to disable unsafe TLS v1 protocol
I had just submitted a PR for this (I was assuming that the options were getting passed to the standard https.createServer method), but it looks like it would require an option to pass through for the union module as well. I killed my fork as a result since I don't really have time to PR this through the whole chain, but I think it would be a great option to have for security :-)
I haven't looked into this, but you may be right about this going all the way down through union. However, we're looking at dropping union if we can, see #483
@arcreative we are trying to get off union (per #483), so help testing the related PRs there would be a great help. Thanks!
This issue has been inactive for 180 days