Follow

Are there any good reasons for servers that support HTTPS to allow HTTP connections without TLS? My site currently forces HTTPS. Intuitively that seems like the right choice to me. Is there a reason I shouldn't do this?

@vecna it is a controversial opinion but: support for OSes that dont support the newer TLS protocols. Either people using old machines, or people buying new low-end smartphones that come with android 4 etc.

@rra @vecna hmmm, can you think of a reason why even old computer would not use TLS?
If not, maybe forcing all PC user agents to https, and leaving free choice to phones?

@mirto @vecna Not computers that use no TLS or SSL at all, but rather people stuck with browsers that don't support the newer protocols.

@vecna old browser/hardware support, fascist governments that block HTTPS

Sign in to participate in the conversation
☠️ librepunk ☠️

A friendly mastodon instance primarily for shitposting, gays, and the glory of the free and open source software movement.