TLS 1.0 temporarily enabled for some sites

Incident Report for CloudCannon

Resolved

For 4 hours, the minimum TLS was reset back to the default of 1.0. This impacted cloudcannon.com, cloudvent.net and domains added to CloudCannon before the change over to TLS 1.2 in 2021. This change was made for debugging purposes and has been reverted. Some additional bot traffic was detected during this time with no major impact on bandwidth usage. During this time 131 requests were made with TLS 1.0 and 4 requests were made with TLS 1.1. No security was compromised for legitimate human traffic.

Posted Nov 21, 2024 - 16:00 UTC