[docmars]

For any gamers out there, Reshade's installer is another example where TLS istn't implemented properly. It fails to download effect/shader packages for basic setup on up-to-date Windows machines because it requires that you disable TLS 1.3 globally on Windows so it can use 1.1 or 1.2.

[1] https://reshade.me/forum/troubleshooting/8746-reshade-v-5-8-...

[ComputerGuru]

I never heard of reshade before but that is quite crazy. The only explanation I can think of is that the backend they connect to implements TLS 1.3 but in a broken way (because the client crypto lib would otherwise fall back to TLS 1.2 on its own) which really makes you wonder just how broken the crypto impl on their servers is and how many vulnerabilities they’re wide open to.

[userbinator]

TLS 1.3 is IMHO still too new to have stabilised and had all the edge-cases worked out. 1.2 was first released in 2008 and only started becoming a requirement more than ~10 years later. I'm not sure how the situation with 1.2 was but I know there were several draft versions of 1.3, which do not interoperate yet had public implementations. That might be what's happening there.

[1vuio0pswjnm7]

Here are a few sites one (IMHO) would expect to support TLS1.3 but do not

   www.digitalocean.com
   arstechnica.com (Amazon)
   git.kernel.org
   cdn.netbsd.org (Fastly)