6 ms·
> (Note: my website shall be accessible only by non-Chrome web browsers, it is not accessible to Chrome-based clients due to its hardcoded client-side HTTP/2 ma
by ilyt 4y ago
> (Note: my website shall be accessible only by non-Chrome web browsers, it is not accessible to Chrome-based clients due to its hardcoded client-side HTTP/2 mandate ignoring and overriding my TLS server’s must have HTTP/1.2-only, ChaCha-only. Chrome is broke, remains my assertion).
I guess everyone needs a hobby lmao. Also what is exactly the problem ? On wireshark I see chrome sending hello with TLS1.2/1.3 and TLS_CHACHA20_POLY1305_SHA256 (0x1303) then getting rejected https://imgur.com/a/HjZormT https://imgur.com/a/HjZormT
- egberts1 4y agoCorrect. TLSv1.2 is getting obsoleted due to several CVEs, so block that. I would be talking about my server mandating HTTP/1.3 over Chrome mandating HTTP/2.0 of which Chrome does poorly in concise error messaging. Since my server decides, it fails. On an unrelated note, stick with TLS v1.3 whenever you can.
- jesprenj 4y agoI suggest you fix the HTTP TLS-less version of the site, so that chromium browsers may access the plaintext version. Currently I get a 404 Not Found for the linked HTML file when connecting via plaintext. TLS only complicated things (: I don't really need to verify the website integrity and privacy when reading an article from a HN commenter I do not know (: Maybe it's only about cosmetics -- a green padlock is more pleasing than a red triangle.
- egberts1 4y agoAh, then you are asking me to reveal my website to Chrome-based users and to support users who like running vulnerabilites. ‘K, no thanks.