potiuk commented on pull request #20912:
URL: https://github.com/apache/airflow/pull/20912#issuecomment-1019325710


   > A workaround the issue is using docker images by SHA and not by version 
(and adding the new key if package updates are needed)
   
   Thanks. However I'd heartily recommend to update your MySQL server is 
updated TLS 1.2. We've seen a lot of vendors following the recommendation to 
get rid of TLS1.1 because in modern world it is not secure enough.  This is 
actually a regulatory requirement in many countries to disable TLS1.0 and very 
strong recommendation to disable TLS1.1 as well.. 
   
   Pretty much all vendors disabled support bu defaul for TLS1.2 mid 2020.
   
   BTW. One could argue thta  another workaround would be to disable SSL at all 
because, well, TLS1.1 is not secure and gives false sense of security.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]


Reply via email to