A county portal still offers SSL and early TLS for 'compatibility,' including connections to citizen payment pages. Which protocol decision aligns with modern secure design?
Select an answer to reveal the explanation.
Short Explanation
SSL is the VHS tape of encryption—nostalgic and unsafe. For payments and citizen portals, turn off the museum protocols and insist on current TLS. Compatibility isn’t worth handing attackers a weak handshake.
Full Explanation
Modern communication security retires SSL and obsolete TLS versions that contain known weaknesses, favoring current TLS for confidentiality and integrity of sensitive municipal traffic. Compatibility exceptions should be temporary, isolated, and tracked—not blanket enablement of weak protocols on payment paths. Cleartext backend hops still require compensating controls; they do not justify keeping broken front-door crypto.