> What it doesn't do, is force good TLS - there's nothing to stop a site using a... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

iso1631 on Nov 17, 2020 | parent | context | favorite | on: Firefox 83 introduces HTTPS-Only Mode

> What it doesn't do, is force good TLS - there's nothing to stop a site using a weak algorithm, SSLv2/3, or old TLS versions.

TLS 1.0 and 1.1 were disabled in Firefox 78 in June.

antonyh on Nov 17, 2020 [–]

That's good news. I know there was some flip-flopping over this because of covid and gov sites requiring old encryption. Great to hear that it's now done with.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact