[lug] apache config, TLSv1 versus SSLv2?

Lee Woodworth blug-mail at duboulder.com
Sat Sep 3 21:47:33 MDT 2005


D. Stimits wrote:
> I'm looking at the apache site config docs for version 2 of apache:
> http://httpd.apache.org/docs/2.0/ssl/ssl_howto.html
> 
> In it, they offer a section on allowing strong encryption only. I see 
> them using SSLv2, but I know there is also a TLSv1. Is SSLv2 
> newer/stronger than TLSv1? Or is this complete apples and oranges 
> comparison?
TLS 1 is essentially SSL 3. TLS is a 'standard' while SSL is a
netscape specification. SSL 2 has security issues so I wouldn't
allow it for the server or for your browser.

> 
> D. Stimits, stimits AT comcast DOT net
> _______________________________________________
> Web Page:  http://lug.boulder.co.us
> Mailing List: http://lists.lug.boulder.co.us/mailman/listinfo/lug
> Join us on IRC: lug.boulder.co.us port=6667 channel=#colug




More information about the LUG mailing list