3 ms·
Anything that cant do SNI isn't going to support TLS 1.1+ and wont be able to access a huge percentage of the web anyways. Eventually old clients have to be le
by throwaway2048 9y ago
Anything that cant do SNI isn't going to support TLS 1.1+ and wont be able to access a huge percentage of the web anyways.
Eventually old clients have to be let go of, maintaining compatibility for them degrades everyone else's security.
- kvz 9y agoUnless you support both via e.g. https://jve.linuxwall.info/blog/index.php?post/2015/10/04/SHA1/SHA256-certificate-switching-with-HAProxy https://jve.linuxwall.info/blog/index.php?post/2015/10/04/SH...