2 Replies Latest reply on Jan 19, 2019 11:08 AM by rscasny

    Essentials of IoT quiz question #14 (and related content) is wrong (https://www.element14.com/community/docs/DOC-91377/l/element14-essentials-iot-security)


      Answer for #14 is wrong. You should NOT employ SSL for web servers. SSL is deprecated and only TLS connections should be used. IETF deprecated SSL2 in 2011 and SSL3 in 2015 (rfc7568). https://tools.ietf.org/html/rfc7568


      30 June 2018 was the deadline for disabling SSL and early TLS for PCI DSS. You should be using TLS 1.1 or higher, 1.2 strongly recommended.


      If you're going to give a quiz promoting security, _please_ give out correct advice.

      • Reply