News for hackers. Stuff that matters.

A comment on CDC website built by Deloitte at a cost of $44M is abandoned due to bugs. Parent comment

Re:CDC website built by Deloitte at a cost of $44M is abando... by onion2k on Sunday January 31, 2021 @02:11AM (#25976808)
Something to note about this strategy is that older versions of IE (10 and older) only support TLS 1.0 by default. Below 8 you're stuck with TLS 1.0 and can't even enable anything higher. So if "https://www.cdc.gov" is using modern web security IE users won't even get to request data from the server, so you can't detect their browser.
[ Parent | on HN ]
Re:CDC website built by Deloitte at a cost of $44M is abando... by user5994461 on Sunday January 31, 2021 @12:15PM (#25980407)
To add more info. TLS 1.0 is prohibited from usage by many regulations and it will be immediately flagged by any security audit/tools. The government contract most certainly includes clauses about security and following recommended practices.

In short, anything below IE 11 is de-facto out of the picture.

[ Parent | on HN ]