UK NCSC updates TLS guidance, adds post-quantum advice
Original title：Using TLS to protect data
What happened
The UK NCSC published guidance on configuring TLS securely and migrating to post-quantum cryptography (PQC). It recommends TLS 1.3 profiles and disabling SSL and TLS 1.0/1.1.
Who is affected
- Anyone managing their own web or mail servers
- Operators who can choose TLS policy on a CDN
What to do
Enable TLS 1.3 on your servers or CDN and disable SSL and TLS 1.0/1.1. If you only use TLS 1.2, plan a move to TLS 1.3.
About this policy
- Jurisdiction
- UK · National Cyber Security Centre (NCSC)
- Who it applies to
- Admins who configure TLS on servers or CDNs
Guidance
Why this flag
特定の脆弱性ではなく、設定方法を示す非拘束のガイドのため。
Blue flag: be aware — Policy, research, industry trends and guides that need no immediate technical action.
Sources
- Primary source：UK National Cyber Security Centre ↗