1 Reply Latest reply on Jan 15, 2019 3:55 AM by Christopher Stanton

    Essentials of IoT quiz question #14 (and related content) is wrong (https://www.element14.com/community/docs/DOC-91377/l/element14-essentials-iot-security)

    firefighterblu3

      Answer for #14 is wrong. You should NOT employ SSL for web servers. SSL is deprecated and only TLS connections should be used. IETF deprecated SSL2 in 2011 and SSL3 in 2015 (rfc7568). https://tools.ietf.org/html/rfc7568

       

      30 June 2018 was the deadline for disabling SSL and early TLS for PCI DSS. You should be using TLS 1.1 or higher, 1.2 strongly recommended.

       

      If you're going to give a quiz promoting security, _please_ give out correct advice.

      • Reply