5 ms·

For any gamers out there, Reshade's installer is another example where TLS istn't implemented properly. It fails to download effect/shader packages for basic se

For any gamers out there, Reshade's installer is another example where TLS istn't implemented properly. It fails to download effect/shader packages for basic setup on up-to-date Windows machines because it requires that you disable TLS 1.3 globally on Windows so it can use 1.1 or 1.2. [1] https://reshade.me/forum/troubleshooting/8746-reshade-v-5-8-0-cant-download-effect-packages-any-ideas https://reshade.me/forum/troubleshooting/8746-reshade-v-5-8-...

ComputerGuru 3y ago
I never heard of reshade before but that is quite crazy. The only explanation I can think of is that the backend they connect to implements TLS 1.3 but in a broken way (because the client crypto lib would otherwise fall back to TLS 1.2 on its own) which really makes you wonder just how broken the crypto impl on their servers is and how many vulnerabilities they’re wide open to.
- userbinator 3y ago
  TLS 1.3 is IMHO still too new to have stabilised and had all the edge-cases worked out. 1.2 was first released in 2008 and only started becoming a requirement more than ~10 years later. I'm not sure how the situation with 1.2 was but I know there were several draft versions of 1.3, which do not interoperate yet had public implementations. That might be what's happening there.
- 1vuio0pswjnm7 3y ago
  Here are a few sites one (IMHO) would expect to support TLS1.3 but do not www.digitalocean.com arstechnica.com (Amazon) git.kernel.org cdn.netbsd.org (Fastly)