SSL Is Now Included on All Paid Dynos

Re:SSL Is Now Included on All Paid Dynos by neoCrimeLabs on Thursday September 22, 2016 @04:53PM (#12560287)

I know some people use SSL and TLS interchangeably, but just in case, I'd recommend using TLS not SSL. SSLv2 and SSLv3 have known security issues and have been superseded by TLSv1 and above.

Also, here's a great server side TLS guide that explains best practices for TLS: https://wiki.mozilla.org/Security/Server_Side_TLS

[ Parent | on HN ]

Re:SSL Is Now Included on All Paid Dynos by brettgoulder on Thursday September 22, 2016 @06:49PM (#12560988)

Sorry about the confusion. It is all TLS under the hood, SSLv3 is completely disabled: https://devcenter.heroku.com/articles/ssl#supported-ssl-prot...

[ Parent | on HN ]