3 ms·
> We've recently added these features: > [...] > - Security up through TLS 1.0 (SSL 3.1). uhhhhhhhh, isn't this removed from Firefox for having security hole
by remexre 4y ago
> We've recently added these features:
> [...]
> - Security up through TLS 1.0 (SSL 3.1).
uhhhhhhhh, isn't this removed from Firefox for having security holes fixed in later versions of the TLS spec?
- fiddlerwoaroof 4y agoThat line is about twelve years old, per git blame. Typically, I’d use a reverse proxy to handle HTTPS anyways.
- nerdponx 4y agoI would almost prefer a web framework that doesn't even bother trying to handle things like HTTPS and assumes that I'm using a reverse proxy in front of it. Fewer things to maintain.
- lf-non 4y agoIs this generally true for compiled languages ? I like being able to handle https in a single go binary for small projects that otherwise don't need a load balancer etc.
- fiddlerwoaroof 4y agoI don't trust random web frameworks to implement HTTPS correctly and there are lots of subtle attacks on cryptography.