3 ms·
Correct. TLSv1.2 is getting obsoleted due to several CVEs, so block that. I would be talking about my server mandating HTTP/1.3 over Chrome mandating HTTP/2.
by egberts1 4y ago
Correct. TLSv1.2 is getting obsoleted due to several CVEs, so block that.
I would be talking about my server mandating HTTP/1.3 over Chrome mandating HTTP/2.0 of which Chrome does poorly in concise error messaging. Since my server decides, it fails.
On an unrelated note, stick with TLS v1.3 whenever you can.
- jesprenj 4y agoI suggest you fix the HTTP TLS-less version of the site, so that chromium browsers may access the plaintext version. Currently I get a 404 Not Found for the linked HTML file when connecting via plaintext. TLS only complicated things (: I don't really need to verify the website integrity and privacy when reading an article from a HN commenter I do not know (: Maybe it's only about cosmetics -- a green padlock is more pleasing than a red triangle.
- egberts1 4y agoAh, then you are asking me to reveal my website to Chrome-based users and to support users who like running vulnerabilites. ‘K, no thanks.