Hacker News new | ask | show | jobs
by habitue 2932 days ago
No, they are definitely shutting off all TLS less than 1.2, it's required to keep PCI certification.
1 comments

PCI requirements are TLS 1.1 minimum. Stripe's change is of course is due to PCI certification and 1.2 is strongly encouraged, but 1.2 is not the defacto version required. They could have just disabled 1.0 and keep 1.1. Just wanted to correct the info. (Also happy that they didn't take the minimum and took the extra effort to implement 1.2)

Source: https://blog.pcisecuritystandards.org/are-you-ready-for-30-j...