3 ms·

Probably not just that. 3DES is the last cipher supported by "old" clients (I'm talking Windows XP). If you remove 3DES, the TLS connection will simply fail. Y

Probably not just that. 3DES is the last cipher supported by "old" clients (I'm talking Windows XP). If you remove 3DES, the TLS connection will simply fail. You can never imagine how many people are still using WinXP, or other forgotten legacy clients/servers that only support up to TLS 1.0 and RC4/DES/3DES without realizing it.

everfrustrated 1y ago
Article is talking server-server flows not clients.
- waste_monk 1y ago
  Would this not also include desktop email clients using SMTP for mail submission?
  - zzq1015 1y ago
    Yeah, despite what it says, I really think Google is gonna ditch 3DES across the board, starting from Gmail.
waste_monk 1y ago
>You can never imagine how many people are still using WinXP XP still has 0.38% of market share (specifically Windows non-mobile platforms) according to [1], not sure about absolute numbers. >If you remove 3DES, the TLS connection will simply fail. Strong backwards compatibility is great, but continuing to run XP 10+ years after EOL is a personal choice and its remaining users should not expect the world to continue to accomodate them forever. I don't think it's unreasonable to deny them service in this case. [1] https://gs.statcounter.com/os-version-market-share/windows/desktop/worldwide https://gs.statcounter.com/os-version-market-share/windows/d...
- zzq1015 1y ago
  0.38% of what? For sites like Google, it's still too large to ignore. Also, a fun fact: Google still serves plain HTTP for really old clients, just in case the client barely supports HTTPS.
  - waste_monk 1y ago
    >0.38% of what? Machines visiting sites with statcounter tracking widgets (and presumably not running with scripts/cookies disabled etc. ). That works out to be ~5ish million internet connected XP machines, apparently[1]. >For sites like Google, it's still too large to ignore. They do this sort of thing all the time [2]. IIRC Reader still had several million users when it got the axe. [1] https://www.computerworld.com/article/2091600/youre-not-really-still-using-windows-xp-are-you.html https://www.computerworld.com/article/2091600/youre-not-real... [2] https://killedbygoogle.com/ https://killedbygoogle.com/

everfrustrated 1y ago

Article is talking server-server flows not clients.

waste_monk 1y ago
Would this not also include desktop email clients using SMTP for mail submission?
- zzq1015 1y ago
  Yeah, despite what it says, I really think Google is gonna ditch 3DES across the board, starting from Gmail.

waste_monk 1y ago

>You can never imagine how many people are still using WinXP XP still has 0.38% of market share (specifically Windows non-mobile platforms) according to [1], not sure about absolute numbers. >If you remove 3DES, the TLS connection will simply fail. Strong backwards compatibility is great, but continuing to run XP 10+ years after EOL is a personal choice and its remaining users should not expect the world to continue to accomodate them forever. I don't think it's unreasonable to deny them service in this case. [1] https://gs.statcounter.com/os-version-market-share/windows/desktop/worldwide https://gs.statcounter.com/os-version-market-share/windows/d...

zzq1015 1y ago
0.38% of what? For sites like Google, it's still too large to ignore. Also, a fun fact: Google still serves plain HTTP for really old clients, just in case the client barely supports HTTPS.
- waste_monk 1y ago
  >0.38% of what? Machines visiting sites with statcounter tracking widgets (and presumably not running with scripts/cookies disabled etc. ). That works out to be ~5ish million internet connected XP machines, apparently[1]. >For sites like Google, it's still too large to ignore. They do this sort of thing all the time [2]. IIRC Reader still had several million users when it got the axe. [1] https://www.computerworld.com/article/2091600/youre-not-really-still-using-windows-xp-are-you.html https://www.computerworld.com/article/2091600/youre-not-real... [2] https://killedbygoogle.com/ https://killedbygoogle.com/