Why TLS 1.3 isn't in browsers yet

Re:Why TLS 1.3 isn't in browsers yet by wav-part on Thursday December 28, 2017 @03:56AM (#16021041)

Ofcourse CL should never downgrade to non-secure versions. SSLv3 is discouraged so CL wont try this. But 1.2 still ok.

[ Parent | on HN ]

Re:Why TLS 1.3 isn't in browsers yet by syncsynchalt on Thursday December 28, 2017 @04:45PM (#16025160)

TLS 1.2 is insecure. Prove me wrong.

So I guess we can't downgrade to it, and we should make 1.3 work without re-negotiation.

[ Parent | on HN ]

Re:Why TLS 1.3 isn't in browsers yet by majewsky on Thursday December 28, 2017 @07:12AM (#16021613)

That's what they said about SSL 3 some time ago.

[ Parent | on HN ]

Re:Why TLS 1.3 isn't in browsers yet by wav-part on Thursday December 28, 2017 @07:27AM (#16021658)

If a client and server both dont upgrade to secure version and still use old now-broken version, there is nothing to be done.

This thread is just now getting repeatitive.

[ Parent | on HN ]