[openssl-users] the whole internet gets real small real fast on TLS 1.3

Dennis Clarke dclarke at blastwave.org
Tue Aug 14 19:45:51 UTC 2018


Seems google.com supports TLS 1.3 as well as very very few others.
There is also https://beta.tls13.net/ running apache-trunk where
that site is based on OpenSSL 1.1.1-pre8 and supports TLS 1.3 and a
fallback to TLS 1.2 however I think browsers will *not* perform tls
version fallback from TLS 1.3.  Not sure.  Firefox ( chrome? ) have a
local config var called security.tls.version.max which can be set to 4
and there is also a local var security.tls.version.fallback-limit to
fiddle with. If you set your browser to TLS 1.3 only with fallback
disabled then the whole internet gets real small real fast. However
google.com does work with TLS 1.3 and that is just recent.


Dennis


More information about the openssl-users mailing list