|
|
|
|
|
|
by brians
3808 days ago
|
|
|
Windows XP. Python through about 2.6. Java until quite recently. Old Perl code that I shudder to think about. <shudder> Oh, and some old Android. The Android version that started supporting SNI is apparently also the version that tightened up licensing, so a number of third-world forks still use the old version. And as long as most of the web works without SNI, they don't have a huge incentive to change that. The work that some browser vendors (Mozilla, Google) are doing to privilege imperfect-TLS over no-TLS is crucial here. Also, yes: new Web work should all be done over HTTPS. |
|
|