3 ms·
>But by forcing TLS 1.1 or higher, some users will invariably be locked out But that needed so that we can guarantee that their experience is secure. Now mayb
by ninju 8y ago
>But by forcing TLS 1.1 or higher, some users will invariably be locked out
But that needed so that we can guarantee that their experience is secure.
Now maybe we should redirect to an information/explanation page if we auto-detect that they are configured to use an no longer supported TLS level (rather than the error page)
- chrisseaton 8y ago>> By allowing older, insecure standards and enabling users to continue to connect to our sites, we’re not helping them > Yes we are because we are guaranteeing that their experience is secure. I don’t understand - by allowing users to use insecure crypto we’re keeping them secure? What do you mean?
- ninju 8y agosorry I copied the wrong paragraph when first posted my comment and I have since updated my comment