Today I learned that GCP defaults to allowing *TLS 1.0* on load balancers. If you don't provide an SSL Policy in your API call, if you miss a line in your Terrraform, the default behaviour is to accept *TLS 1.0*, which has been around since 1999 and widely seen as insecure for over a decade đ¤Ż
about 2 years ago