3 ms·
I made the change to remove the version UI from Firefox. I made that change for two reasons: (1) It sped up the implementation of TLS 1.1 and TLS 1.2. Removing
by briansmith 12y ago
I made the change to remove the version UI from Firefox. I made that change for two reasons:
(1) It sped up the implementation of TLS 1.1 and TLS 1.2. Removing the UI meant I didn't have to redo the UI when I added TLS 1.1 and TLS 1.2 support. Keeping that UI would have caused TLS 1.1 and TLS 1.2 to be delayed even further.
(2) Our measurements showed that ~1% of users had disabled TLS 1.0, leaving only SSL 3.0 enabled. I was worried that the UI encouraged people to make that mistake. Also, it is the application's responsibility to do the right thing automatically. People shouldn't have to fiddle with such options to be secure.