News for hackers. Stuff that matters.

A comment on TLS 1.3 is going to save us all, and other why IoT is still insecure (2017).

Re:TLS 1.3 is going to save us all, and other why IoT is sti... by nickserv on Thursday May 09, 2019 @04:00PM (#19871784)
Switching to TLS 1.3 will probably not really start in earnest until libssl 1.1.1 is installed by default on all major Linux distros.

I'm running on Debian 9 and getting nginx to run TLS 1.3 took some work, nothing difficult, but when you see that many (most?) admins don't even bother to change SSH settings from the default, adding extra source lists seems impossible.

Also, we're unable to kill off TLS 1.0/1.1 because of all these people running IE...

edit: fix libssl version number as mentioned in comment below.

[ Parent | on HN ]
Re:TLS 1.3 is going to save us all, and other why IoT is sti... by yegle on Thursday May 09, 2019 @04:06PM (#19871846)
I think you are referring to OpenSSL 1.1.1. OpenSSL 1.1.0 doesn't support TLS 1.3 (Debian Stretch ships with OpenSSL 1.1.0)
[ Parent | on HN ]
Re:TLS 1.3 is going to save us all, and other why IoT is sti... by nickserv on Thursday May 09, 2019 @04:15PM (#19871946)
Yes, quite right, it's 1.1.1 that supports TLS 1.3
[ Parent | on HN ]
Re:TLS 1.3 is going to save us all, and other why IoT is sti... by achillean on Friday May 10, 2019 @01:24AM (#19875283)
TLS 1.3 adoption has been growing significantly, though largely by CDNs as expected:

https://www.shodan.io/report/Zwg7ScFM

[ Parent | on HN ]