The biggest challenge is in getting the machine to download a modern TLS implementation in the first place. You could just use a different, modern machine for t

The biggest challenge is in getting the machine to download a modern TLS implementation in the first place. You could just use a different, modern machine for that, but this asks interesting questions about our software/formats/protocols supply chains. How recent does a machine need to be, to be able to upgrade to anything at all? Can you understand what the software you're running is actually doing? With the forked Firefox being hopelessly behind upstream, what are the risks of running an outdated stack - should you bet on being obscure enough to not be a target, or take every precaution, such as just disabling JS altogether?