problem with TLS 1.2 restrictions for firebase hosting in India

[Sandeep Srinivasa]

hi guys - 

we are having problems with firebase hosting in India. It seems the SSL certificate (letsencrypt) is restricted to 1.2 only. 

India has a significant number of people on android versions below 4.4 (which does not support 1.2). 

Could you guys allow 1.0 please ? the main google website does.

[Michael Bleigh]

Unfortunately this is not possible. TLS 1.0 is now regarded as insecure by the PCI council: https://blog.pcisecuritystandards.org/are-you-ready-for-30-june-2018-sayin-goodbye-to-ssl-early-tls

Due to this, if we were to leave TLS 1.0 enabled Firebase Hosting would be considered non-compliant for processing payment data, restricting the ability of our customers to build applications. Our infrastructure unfortunately does not support differing TLS versions for different customers, so we must apply the same rules to everyone.

Thanks,

Michael

--
You received this message because you are subscribed to the Google Groups "Firebase Google Group" group.
To unsubscribe from this group and stop receiving emails from it, send an email to firebase-tal...@googlegroups.com.
To post to this group, send email to fireba...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/firebase-talk/4e93c06b-fb4e-4274-9880-35e7d72d5f38%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[Sandeep Srinivasa]

hi michael,

I see - thanks for mentioning this. It makes it clear that you are security first and backward compatibility last. We dont oppose that - however since most of my sites are usually static sites for maximum compatibility, this does not help us and will be migrating out.

thanks for taking the time.

regards

sandeep

You received this message because you are subscribed to a topic in the Google Groups "Firebase Google Group" group.
To unsubscribe from this topic, visit https://groups.google.com/d/topic/firebase-talk/aa7R6BiuCY0/unsubscribe.
To unsubscribe from this group and all its topics, send an email to firebase-tal...@googlegroups.com.

To post to this group, send email to fireba...@googlegroups.com.

To view this discussion on the web visit https://groups.google.com/d/msgid/firebase-talk/CANPY8KXLkGbjS38bvPM%3DRpsuv6oztoS%3Dkho-OgQg1a3hGDRiAg%40mail.gmail.com.