Why isn't HTTPS everywhere yet?

Re:Why isn't HTTPS everywhere yet? by cm2187 on Tuesday January 19, 2016 @07:18AM (#10930199)

Or they should package it in vestions. "TLS 1.3" would come with a standard list of ciphers and other parameters. All you would have to do is tell your system "Disable SSL3.0" "Enable TLS 1.3", etc.

Right now it feels like trying to fly a B747.

[ Parent | on HN ]

Re:Why isn't HTTPS everywhere yet? by brians on Tuesday January 19, 2016 @08:39AM (#10930608)

That does happen! Enable TLS 1.2 only and you're in pretty good shape. TLS 1.3 will drop more bad stuff and add a bit more good stuff.

[ Parent | on HN ]

Re:Why isn't HTTPS everywhere yet? by stealthyb on Tuesday January 19, 2016 @10:31AM (#10931350)

It definitely helps, but if you're trying to keep up with the latest security, you'd be susceptible to Logjam (due to DHE-supporting ciphers in the default TLS 1.2 list).

There's the Mozilla SSL Configuration Generator which helps with the madness, but they still aren't keeping up with the latest recommendations.

[ Parent | on HN ]