Topic

Configuring Transport Layer Security

Applicable to

all

History

Priority

recommended

Mar 2022

Only the latest version of TLS is used for TLS connections.

Miscellaneous changes were made to rationale and recommendations throughout the publication to clarify content without changing intent. This included a review from the Guidelines for System Hardening chapter through to the Guidelines for Data Transfers chapter.

Oct 2019

Only the latest version of TLS is used.

Security control 1139 was modified to remove ambiguity around which versions of TLS should be supported.

Sep 2019

The latest version of TLS is used.

2015

Agencies should use the latest version of TLS.

2010

It is recommended agencies use the current version of TLS instead of SSL.