> This leads to interesting situations with, say, PowerPC Mac software sites. Either they have http connections, or they use user-agent sniffing to downgrade TL

> This leads to interesting situations with, say, PowerPC Mac software sites. Either they have http connections, or they use user-agent sniffing to downgrade TLS That doesn't work. The user-agent is passed after the encryption channel is established. What they do is offer all the options, and the client picks the best one they can support. However, why would this need to be HTTPS to begin with? If you're not transmitting anything private, HTTP works just fine.