[Server-devel] Debian LTS Clarification & UbuCon @ SCaLE March 1-2 (free)

[Adam Holt]

On Tue, Feb 21, 2017 at 4:17 PM, James Cameron <quozl at laptop.org> wrote:

> On Tue, Feb 21, 2017 at 07:20:51AM -0500, Adam Holt wrote:
> > 1) in the address bar type: chrome://flags
> > 2) Go down to the setting: "Maximum TLS version enabled"
> > 3) change it from "default" [TLS 1.3] to "TLS 1.2"
>
> Thanks.  This suggests Google uses different default versions on web
> servers depending on geography, or my connection path may contain a
> man in the middle version downgrade attack.  The former seems more
> likely; and is a problem for any project seeking to localise; because
> testing has to be in the deployment country.
>

Agreed.

My testing yesterday showed that even https://google.com resolves
differently every-10min-or-so, sometimes working -then- sometimes not
working, even within the same country (last I checked, this
not-so-United-States is still technical 1 country ;)
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.laptop.org/pipermail/server-devel/attachments/20170221/23f9bd46/attachment.html>