jquery / jquery/infrastructure-puppet
Should we disable TLS 1.0/1.1?
Open
@Krinkle is already working on this.
Since Feb 7, 2026.
security
Service: Doc sites
Type: Enhancement
- Dominant language
- Puppet
- Stars
- 12
- Forks
- 9
- PR merge metrics
- No merged PRs in 30d
Description
jquery.com gets flagged by checkers like SSL Labs because of its support for TLS 1.0/1.1. Should we disable it?
I realize impact is limited as modern browsers don't support these TLS versions, so downgrade attacks won't apply there, but still, it'd be good to see which environments we'd break if we disabled old TLS and whether we consider worth it.
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Assessment
This issue has not been assessed yet.