3 ms·
> From a site reliability perspective HTTPS is still broken. Some 15yo OS can't access any site because it doesn't have the certificates or cipher suites Sorry
by warrenm 4y ago
> From a site reliability perspective HTTPS is still broken. Some 15yo OS can't access any site because it doesn't have the certificates or cipher suites
Sorry, but this argument doesn't hold water
And this coming from someone who supports systems still running NT 4
I have fallback rules enabled on all of my domains - TLS 1.3 is preferred, but older editions will be supported if the need arises (1.2, 1.1, and 1.0 (on a single domain))
- the8472 4y agoDoesn't that enable downgrade attacks?
- warrenm 4y agoWhen you need to support older OSes, does it matter?
- neurostimulant 4y agoIf your service must meet some strict certifications (e.g. PCI DSS), simply enabling old tls/ssl protocols for backward compatibility is not an option.