pkg/server: add a note on disallowing tls 1.1/1.0
@@ -47,6 +47,7 @@ func (a *APIServer) Serve() {
mcs := &http.Server{
Addr: fmt.Sprintf(":%v", a.port),
Handler: a.handler,
+ // We don't want to allow 1.1 as that's old. This was flagged in a security audit.
TLSConfig: &tls.Config{
MinVersion: tls.VersionTLS12,
},
