4 ms·

I guess I'm confused about your stance. What is your suggestion? Stay on SSL 3 because TLS 1.0 and TLS 1.1 have issues? Are there any known issues with TLS 1.2

I guess I'm confused about your stance. What is your suggestion? Stay on SSL 3 because TLS 1.0 and TLS 1.1 have issues? Are there any known issues with TLS 1.2? I'm not aware of any.

mc_hammer 11y ago
What i feel is: - dont mislabel it as https - every dev who is gonna use tls should try to verify the security of their languages tls implementation - they should do a feature freeze for at least 1 year or something and let us verify our implementations, theres no need for a new tls every 3 months or they are doing it wrong - dont run all the worlds https and ssh over tls, at least give everyone two options - before we let them global root everything, know how hard it is going to be to setup a meshnet
- mattkrea 11y ago
  How is it mislabeling https? HTTP over TLS is still HTTP over a secure tunnel.
  - mc_hammer 11y ago
    I was basing off the w3 directors article [1] 1: http://www.w3.org/DesignIssues/Security-NotTheS.html http://www.w3.org/DesignIssues/Security-NotTheS.html