TLS 1.3 and P M

General discussion area and chat

Moderator: satrow

Forum rules
This General Discussions forum is an open chat area, so you can talk about almost any subject. Please keep things civil, though!

Please do try to somewhat stick to the relevance of this forum, which focuses on everything around the Pale Moon project and its user community. "Totally random" subjects don't really belong here, even in the general discussion area.
User avatar
TwoTankAmin
Astronaut
Astronaut
Posts: 720
Joined: Wed, 23 Jul 2014, 13:56
Location: New York

TLS 1.3 and P M

Unread postby TwoTankAmin » Tue, 14 Aug 2018, 14:28

I was just reading an article on techcrunch.com that FireFox now supports the new TLS 1.3 upgrade. https://techcrunch.com/2018/08/13/firefox-now-supports-the-newest-internet-security-protocol/

I could not find the security settings in P M Preferencesa and I assume that is because I stopped using Commander and no longer have it as an extension.

Will P M be implementing the new TLS protocol or has this already been done?
“No one has ever become poor by giving.” Anonymous
“Everyone is entitled to his own opinion, but not to his own facts.”" Daniel Patrick Moynihan
"The good thing about science is that it’s true whether or not you believe in it." Neil DeGrasse Tyson

User avatar
Tomaso
Keeps coming back
Keeps coming back
Posts: 943
Joined: Thu, 23 Jul 2015, 16:09
Location: Norway

Re: TLS 1.3 and P M

Unread postby Tomaso » Tue, 14 Aug 2018, 14:54

Already enabled by default in v28:
https://github.com/MoonchildProductions ... 215d3c661/
(security.tls.version.max = 4)
Last edited by Tomaso on Tue, 14 Aug 2018, 14:57, edited 2 times in total.

User avatar
therube
Astronaut
Astronaut
Posts: 500
Joined: Fri, 08 Jun 2018, 17:02

Re: TLS 1.3 and P M

Unread postby therube » Tue, 14 Aug 2018, 16:06


User avatar
TwoTankAmin
Astronaut
Astronaut
Posts: 720
Joined: Wed, 23 Jul 2014, 13:56
Location: New York

Re: TLS 1.3 and P M

Unread postby TwoTankAmin » Tue, 14 Aug 2018, 18:26

I am not using ver 28, I am using 27.9.4 and will likely wait a a while after the release of 28 before I give it a try. I usually wait on any software major upgrade for a month or more for the initial bugs to be discover4ed and fixed. With Windows the wait was more like years.

Does this mean the newest TLS is not be available for P M versions lower than 28? I see the "security.tls.version.max" in about:config. It is set to 3. Can it be set to 4 and therefore be using TLS 1.3 in P M 27.9.4?
“No one has ever become poor by giving.” Anonymous
“Everyone is entitled to his own opinion, but not to his own facts.”" Daniel Patrick Moynihan
"The good thing about science is that it’s true whether or not you believe in it." Neil DeGrasse Tyson

User avatar
therube
Astronaut
Astronaut
Posts: 500
Joined: Fri, 08 Jun 2018, 17:02

Re: TLS 1.3 and P M

Unread postby therube » Tue, 14 Aug 2018, 18:44

Does this mean the newest TLS is not be available for P M versions lower than 28?

Correct.
I see the "security.tls.version.max" in about:config. It is set to 3. Can it be set to 4 and therefore be using TLS 1.3 in P M 27.9.4?

Yes, except that you are using an older draft then the current draft/release, so in that respect, PM 27 will still fail on sites that look for the latest draft/release (such as, https://tls13.crypto.mozilla.org/).

In any case, in most cases, there should be fallbacks. Additionally it will take sites time to update to 1.3 (some have already), so it's not like there is an immediate need for "1.3 *now*"!
Last edited by therube on Tue, 14 Aug 2018, 18:47, edited 2 times in total.

User avatar
Moonchild
Pale Moon guru
Pale Moon guru
Posts: 21953
Joined: Sun, 28 Aug 2011, 17:27
Location: 58.5°N 15.5°E
Contact:

Re: TLS 1.3 and P M

Unread postby Moonchild » Tue, 14 Aug 2018, 19:57

TLS 1.2 is perfectly safe and secure to use for a long time to come.
I would not worry about requiring TLS 1.3 anywhere for a long while either.
Improving Mozilla code: You know you're on the right track with code changes when you spend the majority of your time deleting code.

"If you want to build a better world for yourself, you have to be willing to build one for everybody." -- Coyote Osborne


Return to “General discussion”

Who is online

Users browsing this forum: loxodont and 8 guests