Description
The shell HTTP client currently uses default TLS configurations which may allow outdated and insecure TLS versions (like 1.0 or 1.1) depending on the environment's default crypto policy.
Proposed Improvement
Explicitly enforce TLS 1.2 as the minimum supported version in newHttpClient to ensure a consistent and secure communication baseline, protecting against downgrade attacks and known vulnerabilities in older TLS protocols.
Description
The shell HTTP client currently uses default TLS configurations which may allow outdated and insecure TLS versions (like 1.0 or 1.1) depending on the environment's default crypto policy.
Proposed Improvement
Explicitly enforce TLS 1.2 as the minimum supported version in
newHttpClientto ensure a consistent and secure communication baseline, protecting against downgrade attacks and known vulnerabilities in older TLS protocols.