opentelemetry-collector icon indicating copy to clipboard operation
opentelemetry-collector copied to clipboard

[configtls] Bump MinTLS version to 1.3

Open mx-psi opened this issue 1 month ago • 0 comments

As discussed on a previous Collector SIG meeting, we can bump the default minimum TLS version to 1.3 by default to have a more secure default. Users would still be able to use earlier versions of TLS by modifying the MinTLS configuration.

Since this is potentially breaking, we may want to go through a feature gate process.

Reported as part of the recent security audit.

mx-psi avatar Jun 26 '24 17:06 mx-psi