3 ms·
TBH, xkcd is using pretty outdated crypto all over the place, not just the sha-1 issue (though that's there too). xkcd.com still supports SSL3 which can't real
by pilif 12y ago
TBH, xkcd is using pretty outdated crypto all over the place, not just the sha-1 issue (though that's there too).
xkcd.com still supports SSL3 which can't really be trusted any more and it either supports really bad 56 bit single DES or RC4, neither of which are adequate any more.
Ok. it's a web comic, so SSL isn't of that much importance, but I would certainly prefer chrome to warn me when visiting a site using these settings, so I can make a decision whether to type in any credentials or not.
- smackfu 12y agoIt should also be mentioned that they certainly aren't actively pushing people to the secure site. You would only get it if you manually typed it in, or are using HTTPS Everywhere. And the forums, the only place you would actually log in, don't even have a secure version: https://forums.xkcd.com/ https://forums.xkcd.com/