3 ms·
It's sadly not just the servers but also the clients... still you're right about that being a really long tail at this point. Edit: A quick search seems to in
by mjevans 9y ago
It's sadly not just the servers but also the clients... still you're right about that being a really long tail at this point.
Edit:
A quick search seems to indicate that the only typical consumer facing system that doesn't support SNI is IE on Windows XP. It's pretty safe to have a catch-all bucket that informs such users to use a modern, security patches including browser or to upgrade to a different OS.
- throwaway2048 9y agoAnything that cant do SNI isn't going to support TLS 1.1+ and wont be able to access a huge percentage of the web anyways. Eventually old clients have to be let go of, maintaining compatibility for them degrades everyone else's security.
- kvz 9y agoUnless you support both via e.g. https://jve.linuxwall.info/blog/index.php?post/2015/10/04/SHA1/SHA256-certificate-switching-with-HAProxy https://jve.linuxwall.info/blog/index.php?post/2015/10/04/SH...