News for hackers. Stuff that matters.

A comment on Why TLS 1.3 isn't in browsers yet. Parent comment

Re:Why TLS 1.3 isn't in browsers yet by Franciscouzo on Wednesday December 27, 2017 @09:37PM (#16019912)
There's this [0] standard that nobody implements, AFAIK the security risks could be mitigated by asking for confirmation from the user.

[0] https://www.w3.org/TR/tcp-udp-sockets/

[ Parent | on HN ]
Re:Why TLS 1.3 isn't in browsers yet by Paul-ish on Wednesday December 27, 2017 @10:11PM (#16020047)
I'm not sure users would understand what they are being asked. Plus, whenever someone wants to do something dangerous in the browser, they say "Oh, we will ask the user". If everyone got their way, users would be inundated with dialogs.
[ Parent | on HN ]