Was support for legacy TLS temporarily discontinued or something?
I noticed I couldn't connect the other day, but now it seems I can again.
For what it's worth, I strongly oppose any measure that makes Wikimedia projects less accessible.
Sounds like you may have been affected by https://phabricator.wikimedia.org/T238038 which would've sent you to a page like https://meta.wikimedia.org/sec-warning Why are you attempting to connect using old versions of TLS?
On Sun, 24 Nov 2019 at 20:30, Benjamin Ikuta benjaminikuta@gmail.com wrote:
Was support for legacy TLS temporarily discontinued or something?
I noticed I couldn't connect the other day, but now it seems I can again.
For what it's worth, I strongly oppose any measure that makes Wikimedia projects less accessible.
Wikimedia-l mailing list, guidelines at: https://meta.wikimedia.org/wiki/Mailing_lists/Guidelines and https://meta.wikimedia.org/wiki/Wikimedia-l New messages to: Wikimedia-l@lists.wikimedia.org Unsubscribe: https://lists.wikimedia.org/mailman/listinfo/wikimedia-l, mailto:wikimedia-l-request@lists.wikimedia.org?subject=unsubscribe
I use a second generation iPod Touch, which is incapable updating any further.
On Nov 24, 2019, at 12:38 PM, Alex Monk krenair@gmail.com wrote:
Sounds like you may have been affected by https://phabricator.wikimedia.org/T238038 which would've sent you to a page like https://meta.wikimedia.org/sec-warning Why are you attempting to connect using old versions of TLS?
On Sun, 24 Nov 2019 at 20:30, Benjamin Ikuta benjaminikuta@gmail.com wrote:
Was support for legacy TLS temporarily discontinued or something?
I noticed I couldn't connect the other day, but now it seems I can again.
For what it's worth, I strongly oppose any measure that makes Wikimedia projects less accessible.
Wikimedia-l mailing list, guidelines at: https://meta.wikimedia.org/wiki/Mailing_lists/Guidelines and https://meta.wikimedia.org/wiki/Wikimedia-l New messages to: Wikimedia-l@lists.wikimedia.org Unsubscribe: https://lists.wikimedia.org/mailman/listinfo/wikimedia-l, mailto:wikimedia-l-request@lists.wikimedia.org?subject=unsubscribe
Wikimedia-l mailing list, guidelines at: https://meta.wikimedia.org/wiki/Mailing_lists/Guidelines and https://meta.wikimedia.org/wiki/Wikimedia-l New messages to: Wikimedia-l@lists.wikimedia.org Unsubscribe: https://lists.wikimedia.org/mailman/listinfo/wikimedia-l, mailto:wikimedia-l-request@lists.wikimedia.org?subject=unsubscribe
There comes a time at which "deprecated" has to turn into "no longer supported". Unfortunately, there are inevitably some people left who that will inconvenience, but without that, systems collapse under the weight of providing legacy support for obsolete, rarely-used protocols.
If said obsolescence causes a security risk as well, there's really no question to be had; has to be done.
Todd
On Sun, Nov 24, 2019 at 7:23 PM Benjamin Ikuta benjaminikuta@gmail.com wrote:
I use a second generation iPod Touch, which is incapable updating any further.
On Nov 24, 2019, at 12:38 PM, Alex Monk krenair@gmail.com wrote:
Sounds like you may have been affected by https://phabricator.wikimedia.org/T238038 which would've sent you to a
page
like https://meta.wikimedia.org/sec-warning Why are you attempting to connect using old versions of TLS?
On Sun, 24 Nov 2019 at 20:30, Benjamin Ikuta benjaminikuta@gmail.com wrote:
Was support for legacy TLS temporarily discontinued or something?
I noticed I couldn't connect the other day, but now it seems I can
again.
For what it's worth, I strongly oppose any measure that makes Wikimedia projects less accessible.
Wikimedia-l mailing list, guidelines at: https://meta.wikimedia.org/wiki/Mailing_lists/Guidelines and https://meta.wikimedia.org/wiki/Wikimedia-l New messages to: Wikimedia-l@lists.wikimedia.org Unsubscribe: https://lists.wikimedia.org/mailman/listinfo/wikimedia-l, mailto:wikimedia-l-request@lists.wikimedia.org?subject=unsubscribe
Wikimedia-l mailing list, guidelines at:
https://meta.wikimedia.org/wiki/Mailing_lists/Guidelines and https://meta.wikimedia.org/wiki/Wikimedia-l
New messages to: Wikimedia-l@lists.wikimedia.org Unsubscribe: https://lists.wikimedia.org/mailman/listinfo/wikimedia-l,
mailto:wikimedia-l-request@lists.wikimedia.org?subject=unsubscribe
Wikimedia-l mailing list, guidelines at: https://meta.wikimedia.org/wiki/Mailing_lists/Guidelines and https://meta.wikimedia.org/wiki/Wikimedia-l New messages to: Wikimedia-l@lists.wikimedia.org Unsubscribe: https://lists.wikimedia.org/mailman/listinfo/wikimedia-l, mailto:wikimedia-l-request@lists.wikimedia.org?subject=unsubscribe
There are several versions of TLS. TLS1.1 end of life is soon and it will be out of support very soon, most browsers will remove it in 2020. You should upgrade to support at least TLS1.2 which was released more than ten years ago. Upgrading to a new version is not that complicated. Just update your browser.
We stopped serving SSL altogether a while back. One big reason for this deprecation is not just security of people who use the old browsers but also people who use a secure and modern system as well. There's something called downgrade attack [1]. Using this attack, a secure connection (in a modern setup) can be easily compromised by forcing them to use old protocols like TLS 1.1 (or worse, SSL) instead of the secure ones.
I'm all for giving the most access to everyone in this world but not at the cost of compromising security everyone else.
[1] https://en.wikipedia.org/wiki/Downgrade_attack
On Sun, Nov 24, 2019 at 9:30 PM Benjamin Ikuta benjaminikuta@gmail.com wrote:
Was support for legacy TLS temporarily discontinued or something?
I noticed I couldn't connect the other day, but now it seems I can again.
For what it's worth, I strongly oppose any measure that makes Wikimedia projects less accessible.
Wikimedia-l mailing list, guidelines at: https://meta.wikimedia.org/wiki/Mailing_lists/Guidelines and https://meta.wikimedia.org/wiki/Wikimedia-l New messages to: Wikimedia-l@lists.wikimedia.org Unsubscribe: https://lists.wikimedia.org/mailman/listinfo/wikimedia-l, mailto:wikimedia-l-request@lists.wikimedia.org?subject=unsubscribe
wikimedia-l@lists.wikimedia.org