Hacker News Reader

HNHacker News

Top New Best Ask Show Jobs

Comment by rasz_pl | Hacker News Reader

Parent Full thread

rasz_pl·

and doesnt work in older browsers - free cloudflare cert is ECDHE

View on HN

IE 6, Android 2.X and IOS 3.X...

I feel like a github project page is unlikely to have a lot of visitors running IE 6.

As some who cares both about accessibility on the web and security, what up-to-date browsers don't support ECDHE and what else would be reasonable to support as well?

probably nothing up-to-date, hence I wrote older :) Opera 12.xx being one of the older browsers that works 99% of the time, except EVERY SINGLE page with Cloudflare cert

What makes matters worse is CloudFlare lying about support level: https://support.cloudflare.com/hc/en-us/articles/203041594-W...

They claim Opera 8, 2005 browser supports ecdhe.

At this point anyone using Opera 12.xx must have pretty low expectations of the web though, right? Even if it is really _only_ CloudFlare, they must be used to seeing that?

so far its only been hobby/torrent/scam sites using free cert, nothing you would hesitate opening in a webproxy.

Ill switch browsers when I can open ~100 tabs without eating 8GB of ram (blink engine), Opera 12.17 does it at <2GB, not to mention being able to configure everything per domain (js,blockers,cookies etc).

That listed was originally created based on minimum requirements for SNI. I've gone through recently and documented where versions need to be adjusted "up" based on requirement for ECDSA support. These changes will be posted as part of some other housekeeping work I have planned for cloudflare.com/ssl.

Reply on news.ycombinator.com