4 ms·
Slightly offtopic, I'm having some problems accessing this site due to use of... Older technology. Curl reports: SSL connection using TLSv1.0 / DHE-RSA-AES256-
by shakna 6y ago
Slightly offtopic, I'm having some problems accessing this site due to use of... Older technology.
Curl reports: SSL connection using TLSv1.0 / DHE-RSA-AES256-SHA
Which Firefox will refuse to load without forcibly enabling TLS 1.0, which is actually marked for complete removal at some near point in the future. I believe Chrome's approach is similar, with the same expectation of removal.
Now might be a good time to check the site's architecture. As annoying as that probably is. (Especially as it does just appear to be a static blog).
- a_e_k 6y agoThanks for the heads up. That's odd since it works for me in Firefox (on both desktop and the new mobile) and I don't think I've had to do force enable anything. But it is true that I need to get a certificate and upgrade it to support https. That's been on my to-do list but lower priority since, as you say, it's a static blog.
- shakna 6y agoAh, that'll be it. Your web host actually already supports https, but in a broken way. > TLSv1.0 (IN), TLS handshake, Finished (20): > SSL connection using TLSv1.0 / DHE-RSA-AES256-SHA > ALPN, server did not agree to a protocol > Server certificate: > subject: CN=*.phpwebhosting.com > start date: Apr 7 00:07:56 2020 GMT > expire date: Apr 8 00:07:56 2021 GMT > subjectAltName does not match eastfarthing.com They serve up a wildcard certificate that uses a deprecated TLS.