Reply to thread

Message

<blockquote data-quote="RoChess" data-source="post: 1263566" data-attributes="member: 18896">I'm all with ya, but some servers (perhaps TheTVdB.com) can block TLS 1.2-Only connections, because they still need TLS 1.0/1.1 to make the initial connection and then rely on Forward-Secrecy to scale it up to 1.2. Had that happen myself to Canvas on instructure.com when I forced TLS 1.2 on LTI app for work by removing client-protocol support on server.Got a ticket with Canvas to fix this, because come January 2020 servers still supporting TLS 1.0/1.1 will get into trouble with Google removing protocol support from their browsers. Firefox/Safari following in March 2020, and IE/Edge a mix depending on Chromium or Trident version, so somewhere in Q1 2020.Just wanted to ensure you tested your code on a wide variety of systems, so that a user on XP with terrible TLS 1.2 support (or SNI for that matter) on IE might get into problem, and yes some users still use XP when they should be smacked around for not updating. Also to verify that TheTVdB supports TLS 1.2-Only connections.</blockquote>

[QUOTE="RoChess, post: 1263566, member: 18896"] I'm all with ya, but some servers (perhaps TheTVdB.com) can block TLS 1.2-Only connections, because they still need TLS 1.0/1.1 to make the initial connection and then rely on Forward-Secrecy to scale it up to 1.2. Had that happen myself to Canvas on instructure.com when I forced TLS 1.2 on LTI app for work by removing client-protocol support on server. Got a ticket with Canvas to fix this, because come January 2020 servers still supporting TLS 1.0/1.1 will get into trouble with Google removing protocol support from their browsers. Firefox/Safari following in March 2020, and IE/Edge a mix depending on Chromium or Trident version, so somewhere in Q1 2020. Just wanted to ensure you tested your code on a wide variety of systems, so that a user on XP with terrible TLS 1.2 support (or SNI for that matter) on IE might get into problem, and yes some users still use XP when they should be smacked around for not updating. Also to verify that TheTVdB supports TLS 1.2-Only connections. [/QUOTE]

Verification