Hacker News new | ask | show | jobs
by user5994461 2274 days ago
If you were to ask a room full of developers what are TLS versions or TLS ciphers and which ones should be disabled? You'd be luckly if any of them raise their hands.

Consider an old organization with hundreds of old systems, that can be fairly critical. Nobody understand or is willing to do the work. To their credit, TLS and cryptography is really difficult.

So don't be surprised that things will be fixed... after they're noticeably broken.