To be or not to be (PCI 3.1 Compliant): The TLS 1.2 Only Dilemma
A few days ago, in what we didn't anticipate would be an expensive experiment, we accidentally activated the "TLS 1.2 Only" switch in our CloudFlare account.We need to be PCI compliant and even though PCI 3.1 full enforcement won't come till next year, we were playing around with our Cloudflare Crypto settings previous to a PCI scan. We left the switch on by mistake for almost 6 hours.TL;DR;...