Stories
Slash Boxes
Comments

SoylentNews is people

Meta
posted by on Wednesday November 13 2019, @11:10PM   Printer-friendly
from the lingere dept.

Just a quick note to let those of you who care know that our load balancer finally got bumped up to openssl 1.1.x and is now TLSv1.3 happy. For those of you who are especially paranoid, "ssl_early_data" is explicitly set to "off" in the nginx conf file, actively disabling 0-RTT, even though it's disabled by default.

That's all, carry on.

 
This discussion has been archived. No new comments can be posted.
Display Options Threshold/Breakthrough Mark All as Read Mark All as Unread
The Fine Print: The following comments are owned by whoever posted them. We are not responsible for them in any way.
  • (Score: 2, Informative) by Anonymous Coward on Thursday November 14 2019, @01:52AM (4 children)

    by Anonymous Coward on Thursday November 14 2019, @01:52AM (#920145)

    Great, now my old Seamonkey browser won't connect. Oddly, despite all the hype, a lot of sites still connect with older TLS (but usually look like crap - well, they look like crap in new browsers too). At least it should work in Retrozilla, but have been dragging my feet on setting that up.

    Starting Score:    0  points
    Moderation   +2  
       Informative=2, Total=2
    Extra 'Informative' Modifier   0  

    Total Score:   2  
  • (Score: 0) by Anonymous Coward on Thursday November 14 2019, @02:55AM (1 child)

    by Anonymous Coward on Thursday November 14 2019, @02:55AM (#920167)

    SSL? How old is that SeaMonkey client? Even they disabled SSL by default back in 2014. Additionally, TLS 1.2 appears to have been supported from before that by at least 3 years. I definitely wouldn't recommend browsing random websites on something that old.

    • (Score: 3, Funny) by maxwell demon on Thursday November 14 2019, @08:14AM

      by maxwell demon (1608) on Thursday November 14 2019, @08:14AM (#920255) Journal

      So you say it's time to retire my trusty old Mosaic browser? ;-)

      --
      The Tao of math: The numbers you can count are not the real numbers.
  • (Score: 2) by SomeGuy on Saturday November 16 2019, @12:26AM (1 child)

    by SomeGuy (5632) on Saturday November 16 2019, @12:26AM (#920840)

    It appears that since this story, someone has kindly re-enabled backwards compatiblity.

    • (Score: 0) by Anonymous Coward on Saturday November 16 2019, @08:37PM

      by Anonymous Coward on Saturday November 16 2019, @08:37PM (#921071)

      The SSL Labs website says that the SN server now has TLS 1.0 enabled.