Deprecated SSL/TLS protocol version (CA5397)
Key dotnet.security.deprecated-ssl-protocol · Severity error · Category security · CWE CWE-327
Microsoft analyzer CA5397. Flags SslProtocols.Ssl2, Ssl3, Tls and Tls11. These versions have known attacks and are refused by modern servers; let the operating system choose, or require TLS 1.2 and later.
Incorrect
Section titled “Incorrect”handler.SslOptions.EnabledSslProtocols = SslProtocols.Tls | SslProtocols.Tls11;Correct
Section titled “Correct”// leave the default: the operating system picks TLS 1.2 / 1.3handler.SslOptions.EnabledSslProtocols = SslProtocols.None;