All geek questions in one place

Google App Engine Node.js TLS 1.2

Our application is hosted on the Google App Engine Node.js (flexible environment). We are currently reviewing a security audit and are unable to resolve the issue that the Google App Engine supports TLS versions 1.0 and 1.1.

Is there a way to ensure that only TLS 1.2 is used? And also block ciphers that are below 128 bits?

+5
source share
1 answer

I have not tried this, so I cannot guarantee that this will work, but it looks like you can use the HTTP (S) Load Balancer . SSL policies are customizable so that they most likely meet the requirements of your security review.

0
source

Source: https://habr.com/ru/post/1274897/

More articles:


All Articles