News for hackers. Stuff that matters.

A comment on Ask HN: Cloudflare broke my domain's DNSSEC making it unreachable since 4 days. Parent comment

Re:Ask HN: Cloudflare broke my domain's DNSSEC making it unr... by warrenm on Tuesday May 17, 2022 @12:52PM (#31413368)
> From a site reliability perspective HTTPS is still broken. Some 15yo OS can't access any site because it doesn't have the certificates or cipher suites

Sorry, but this argument doesn't hold water

And this coming from someone who supports systems still running NT 4

I have fallback rules enabled on all of my domains - TLS 1.3 is preferred, but older editions will be supported if the need arises (1.2, 1.1, and 1.0 (on a single domain))

[ Parent | on HN ]
Re:Ask HN: Cloudflare broke my domain's DNSSEC making it unr... by neurostimulant on Wednesday May 18, 2022 @07:47AM (#31421591)
If your service must meet some strict certifications (e.g. PCI DSS), simply enabling old tls/ssl protocols for backward compatibility is not an option.
[ Parent | on HN ]
Re:Ask HN: Cloudflare broke my domain's DNSSEC making it unr... by the8472 on Tuesday May 17, 2022 @12:57PM (#31413450)
Doesn't that enable downgrade attacks?
[ Parent | on HN ]
Re:Ask HN: Cloudflare broke my domain's DNSSEC making it unr... by warrenm on Thursday May 19, 2022 @10:29AM (#31435127)
When you need to support older OSes, does it matter?
[ Parent | on HN ]