53 pointsby Jimmc4147 hours ago3 comments
  • sidewndr464 hours ago
    Couldn't folks just use TLS 1.3?
    • mjevans3 hours ago
      I think the entire point is so that many with devices that will never see updates can still continue to use those devices.
      • ImPostingOnHN3 hours ago
        what stops folks from continuing to use them as-is, aside from this threat to break TLS 1.2 for them?

        if a service runs TLS 1.2, and a client runs TLS 1.2, and they can talk to each other right now, why change the language?

        if you released a thing, and people are choosing not to use it, is the right move really to enshittify their current choice to force them off it?

        • 10000truths29 minutes ago
          If you control both the client and server, then yeah, you can use whatever protocol you want. Doesn't even need to be TLS, you could roll your own thing.

          But if you only control one of the endpoints, then your ability to connect to a peer depends on what the peer thinks. And if the peer follows a standard that says your offered ciphersuites are all insecure, then you're out of luck.

    • bawolff2 hours ago
      They can and they should, but the world is not a perfect place, so backwards compatibility is neccessary.

      So long as TLS 1.2 can still be used securely, its really not a big deal.

      • jsiepkes20 minutes ago
        > so backwards compatibility is neccessary.

        True, but from a technical perspective "necessity" might be a bit of a strong term. For example as far as I know there aren't any Windows versions left that don't have support for TLS 1.2 but are still supported (i.e. not EOL). iirc Windows Server 2012 has support, but it's not enabled by default. So that's the closest to "unsupported" you get with Windows.

        I think this is mostly because people are some what hesitant of enabling TLS 1.3. Because merely enabling TLS 1.3 along side TLS 1.2 can trigger latent bugs in clients.

    • 2 hours ago
      undefined
    • 0ckpuppet4 hours ago
      These prescriptions apply only to (D)TLS 1.2, since (D)TLS 1.0 and TLS 1.1 are deprecated by RFC 8996 and (D)TLS 1.3 either does not use the affected algorithms or does not share the relevant configuration options. (There is no DTLS version 1.1.)
    • ImPostingOnHN4 hours ago
      better to break tons of existing installations and require confusing, arcane config file modifications just for folks to get things back to where they were before being broken
  • 5 hours ago
    undefined