News for hackers. Stuff that matters.

A comment on Firefox 78. Parent comment

Re:Firefox 78 by kbrosnan on Tuesday June 30, 2020 @12:53PM (#23692066)
There has been a bypassable error for TLS 1.0 and 1.1 for several months. There have been error messages in devtools. In October of 2018 the browser vendors jointly announced that this change was coming. [1][2] This is happening in coordination with Chrome. The sites that are affected by this have had nearly 2 years to sort out their upgrade to TLS 1.2 or 1.3.

[1] https://blog.mozilla.org/security/2018/10/15/removing-old-ve... [2] https://blog.chromium.org/2019/10/chrome-ui-for-deprecating-...

[ Parent | on HN ]
Re:Firefox 78 by yjftsjthsd-h on Tuesday June 30, 2020 @02:19PM (#23693070)
> The sites that are affected by this have had nearly 2 years to sort out their upgrade to TLS 1.2 or 1.3.

... or are hardware appliances with a management interface, segregated on an internal VLAN, that will never be updated, but which were helpfully "forward thinking" enough to force HTTPS.

[ Parent | on HN ]