Page 1 of 1

TLS 1.0

Posted: 2021-04-19 21:11
by bcmds
Does the latest version of Server support higher than TLS 1.0?

Chrome no longer accepts it.

Re: TLS 1.0

Posted: 2021-04-20 03:36
by boco
FileZilla Server supports up to TLS 1.2 with high encryption. However, as much as that matters security-wise, it doesn't for browsers. Browsers did never support FTP over TLS, at all. The few browsers left with any support for FTP (constantly shrinking in numbers) do so for plain, unencrypted FTP only. Of course, that's not counting possible add-ons/extensions.

Re: TLS 1.0

Posted: 2021-04-20 16:43
by odeg
Hi,
I use the newest FileZilla FTP Client
Our hosting service home.pl :
"withdrawing TLS 1.1 support on web servers at home.pl.
The following version is supported on the servers at home.pl: TLS 1.2 and higher"

I have the alert when I try to connect:

"this server does not support tls session resumption on the data connection.
Tls session resumption on data connection is important security feature to protect against data connection stealing attacks.
if you continue transferred files may be intercepted or their contents replaced by an attacker"

Support from Home.pl reply:

"FileZilla should connect to the newer one, such as 1.2"

What does it mean ?

Re: TLS 1.0

Posted: 2021-04-21 12:28
by botg
Your hosting provider is using a bad FTP server. They need to upgrade to a more modern and secure FTP server.