https://forums.whonix.org/t/dns-certification-authority-authorization-caa-policy-dnssec-for-whonix-org-ssllabs-com-test-results/5487/5

@TNTBOMBOM

TLS 1.1 and CBC cipher considered weak now better to be deprecated for security reasons:

https://www.ssllabs.com/ssltest/analyze.html?d=deb.whonix.org&s=95.216.25.250&latest

Also now TLS 1.3 available with Lets Encrypt, is it good idea to support it ?

https://kinsta.com/blog/tls-1-3/