Hacker News Reader

I don't get what this is supposed to prove. That my browser doesn't allow websites to declare what encryption they use? I am pretty sure there's a point to all of this, but please let me (and my browser) choose which encryptions I want to trust.

Is this a spec violation or something?

View on HN

Isn't the idea that the server and client should agree on a common subset? Here, the server's subset is very small, but not esoteric – so then surely it's the client that's lacking in features?

Precisely.

Fix the browser.

Yeah but I don't want Chachacha, I prefer AES. If you can't do AES, I'm not interested in the website :)

Reply on news.ycombinator.com