4 ms·

Really don't understand the people downvoting in this thread. Apparently a certain percentage of the population believes that if they don't understand the funct

by _jal 10y ago

Really don't understand the people downvoting in this thread. Apparently a certain percentage of the population believes that if they don't understand the function of an artifact in the world, the maker of said artifact has failed. It isn't quite projection; seems like more of some wildly misguided consumer-is-king impulse. Browsing academic libraries must be hell.

detaro 10y ago
As someone clearly disagreeing with you, I find it interesting that you mention not understanding "the people downvoting" and then only talk about your impression of the posts that are not downvoted. The downvoted posts seem a lot more needlessly rude to me than the ones they respond to, and I hope I'd see that similarly even if felt different about the issue overall. The confused top-level comments to me read mostly as expression of said confusion, which to me is completely fair for a place like HN. Of course people want to understand why something could be interesting to them if it is posted & upvoted here.
ufmace 10y ago
If I'm browsing a library, then I have some idea what I'm looking for, what the context is around what I'm seeing. Here, I'm not looking for anything in particular, just browsing around. I have no idea what this thing is right away, and whoever designed it didn't bother to make it clear. There's a million other things out there that are clear right away, so why should I bother to figure this one out?
baby 10y ago
Posting something without explanation is bad taste :) I completely understand what this thing is for (easy testing of TLS clients) but I can understand the frustration of seeing a link without context.
- emn13 10y ago
  Although the color-coding is odd; red doesn't mean insecure or even "dubious", even though it does sometimes... So using the site even for testing TLS clients seems a little non-obvious. At least if the idea was that your client should accept green and reject red connections, the site has definitely failed. If the idea was just to let you see what happens, then why the color coding?
  - baby 10y ago
    Can you tell me which `red` is not insecure? (or not obsolete)
    - emn13 10y ago
      https://mozilla-old.badssl.com/ https://mozilla-old.badssl.com/ negotiates to TLS1.2 ECDHE RSA AES128 GCM SHA256 for me (FF54) which is fine. There may well be obsolete stuff that server does support; but as negotiated, that's pretty much as good as it gets. It even has the new downgrade-prevention extensions on, so support for the old stuff shouldn't be a problem even if your client accepts it (which it need not).
      - baby 10y ago
        Yeah I see, this one is more of a server-side problem since it still allow SSLv3 connections.
bigbugbag 10y ago
> if they don't understand the function of an artifact in the world, the maker of said artifact has failed. Biggest Mistakes in Web Design 1995-2015 #2 A Man From Mars Can't Figure Out What Your Website Is About In Less Than Four Seconds. http://www.webpagesthatsuck.com/biggest-mistakes-in-web-design-1995-2015.html#2 http://www.webpagesthatsuck.com/biggest-mistakes-in-web-desi... It seems badssl caters to a bunch of insiders who knows about its function, a quick description of what is its purpose and how to use it would make it quite useful to a larger public.

by _jal 10y ago

detaro 10y ago

As someone clearly disagreeing with you, I find it interesting that you mention not understanding "the people downvoting" and then only talk about your impression of the posts that are not downvoted. The downvoted posts seem a lot more needlessly rude to me than the ones they respond to, and I hope I'd see that similarly even if felt different about the issue overall. The confused top-level comments to me read mostly as expression of said confusion, which to me is completely fair for a place like HN. Of course people want to understand why something could be interesting to them if it is posted & upvoted here.

ufmace 10y ago

If I'm browsing a library, then I have some idea what I'm looking for, what the context is around what I'm seeing. Here, I'm not looking for anything in particular, just browsing around. I have no idea what this thing is right away, and whoever designed it didn't bother to make it clear. There's a million other things out there that are clear right away, so why should I bother to figure this one out?

baby 10y ago

Posting something without explanation is bad taste :) I completely understand what this thing is for (easy testing of TLS clients) but I can understand the frustration of seeing a link without context.

emn13 10y ago
Although the color-coding is odd; red doesn't mean insecure or even "dubious", even though it does sometimes... So using the site even for testing TLS clients seems a little non-obvious. At least if the idea was that your client should accept green and reject red connections, the site has definitely failed. If the idea was just to let you see what happens, then why the color coding?
- baby 10y ago
  Can you tell me which `red` is not insecure? (or not obsolete)
  - emn13 10y ago
    https://mozilla-old.badssl.com/ https://mozilla-old.badssl.com/ negotiates to TLS1.2 ECDHE RSA AES128 GCM SHA256 for me (FF54) which is fine. There may well be obsolete stuff that server does support; but as negotiated, that's pretty much as good as it gets. It even has the new downgrade-prevention extensions on, so support for the old stuff shouldn't be a problem even if your client accepts it (which it need not).
    - baby 10y ago
      Yeah I see, this one is more of a server-side problem since it still allow SSLv3 connections.

bigbugbag 10y ago

> if they don't understand the function of an artifact in the world, the maker of said artifact has failed. Biggest Mistakes in Web Design 1995-2015 #2 A Man From Mars Can't Figure Out What Your Website Is About In Less Than Four Seconds. http://www.webpagesthatsuck.com/biggest-mistakes-in-web-design-1995-2015.html#2 http://www.webpagesthatsuck.com/biggest-mistakes-in-web-desi... It seems badssl caters to a bunch of insiders who knows about its function, a quick description of what is its purpose and how to use it would make it quite useful to a larger public.