Mailing List Archive

[Wikimedia-l] TLS
Was support for legacy TLS temporarily discontinued or something?

I noticed I couldn't connect the other day, but now it seems I can again.

For what it's worth, I strongly oppose any measure that makes Wikimedia projects less accessible.




_______________________________________________
Wikimedia-l mailing list, guidelines at: https://meta.wikimedia.org/wiki/Mailing_lists/Guidelines and https://meta.wikimedia.org/wiki/Wikimedia-l
New messages to: Wikimedia-l@lists.wikimedia.org
Unsubscribe: https://lists.wikimedia.org/mailman/listinfo/wikimedia-l, <mailto:wikimedia-l-request@lists.wikimedia.org?subject=unsubscribe>
Re: [Wikimedia-l] TLS [ In reply to ]
Sounds like you may have been affected by
https://phabricator.wikimedia.org/T238038 which would've sent you to a page
like https://meta.wikimedia.org/sec-warning
Why are you attempting to connect using old versions of TLS?

On Sun, 24 Nov 2019 at 20:30, Benjamin Ikuta <benjaminikuta@gmail.com>
wrote:

>
>
> Was support for legacy TLS temporarily discontinued or something?
>
> I noticed I couldn't connect the other day, but now it seems I can again.
>
> For what it's worth, I strongly oppose any measure that makes Wikimedia
> projects less accessible.
>
>
>
>
> _______________________________________________
> Wikimedia-l mailing list, guidelines at:
> https://meta.wikimedia.org/wiki/Mailing_lists/Guidelines and
> https://meta.wikimedia.org/wiki/Wikimedia-l
> New messages to: Wikimedia-l@lists.wikimedia.org
> Unsubscribe: https://lists.wikimedia.org/mailman/listinfo/wikimedia-l,
> <mailto:wikimedia-l-request@lists.wikimedia.org?subject=unsubscribe>
_______________________________________________
Wikimedia-l mailing list, guidelines at: https://meta.wikimedia.org/wiki/Mailing_lists/Guidelines and https://meta.wikimedia.org/wiki/Wikimedia-l
New messages to: Wikimedia-l@lists.wikimedia.org
Unsubscribe: https://lists.wikimedia.org/mailman/listinfo/wikimedia-l, <mailto:wikimedia-l-request@lists.wikimedia.org?subject=unsubscribe>
Re: [Wikimedia-l] TLS [ In reply to ]
There are several versions of TLS. TLS1.1 end of life is soon and it will
be out of support very soon, most browsers will remove it in 2020. You
should upgrade to support at least TLS1.2 which was released more than ten
years ago. Upgrading to a new version is not that complicated. Just update
your browser.

We stopped serving SSL altogether a while back. One big reason for this
deprecation is not just security of people who use the old browsers but
also people who use a secure and modern system as well. There's something
called downgrade attack [1]. Using this attack, a secure connection (in a
modern setup) can be easily compromised by forcing them to use old
protocols like TLS 1.1 (or worse, SSL) instead of the secure ones.

I'm all for giving the most access to everyone in this world but not at the
cost of compromising security everyone else.

[1] https://en.wikipedia.org/wiki/Downgrade_attack

On Sun, Nov 24, 2019 at 9:30 PM Benjamin Ikuta <benjaminikuta@gmail.com>
wrote:

>
>
> Was support for legacy TLS temporarily discontinued or something?
>
> I noticed I couldn't connect the other day, but now it seems I can again.
>
> For what it's worth, I strongly oppose any measure that makes Wikimedia
> projects less accessible.
>
>
>
>
> _______________________________________________
> Wikimedia-l mailing list, guidelines at:
> https://meta.wikimedia.org/wiki/Mailing_lists/Guidelines and
> https://meta.wikimedia.org/wiki/Wikimedia-l
> New messages to: Wikimedia-l@lists.wikimedia.org
> Unsubscribe: https://lists.wikimedia.org/mailman/listinfo/wikimedia-l,
> <mailto:wikimedia-l-request@lists.wikimedia.org?subject=unsubscribe>



--
Amir (he/him)
_______________________________________________
Wikimedia-l mailing list, guidelines at: https://meta.wikimedia.org/wiki/Mailing_lists/Guidelines and https://meta.wikimedia.org/wiki/Wikimedia-l
New messages to: Wikimedia-l@lists.wikimedia.org
Unsubscribe: https://lists.wikimedia.org/mailman/listinfo/wikimedia-l, <mailto:wikimedia-l-request@lists.wikimedia.org?subject=unsubscribe>
Re: [Wikimedia-l] TLS [ In reply to ]
I use a second generation iPod Touch, which is incapable updating any further.



On Nov 24, 2019, at 12:38 PM, Alex Monk <krenair@gmail.com> wrote:

> Sounds like you may have been affected by
> https://phabricator.wikimedia.org/T238038 which would've sent you to a page
> like https://meta.wikimedia.org/sec-warning
> Why are you attempting to connect using old versions of TLS?
>
> On Sun, 24 Nov 2019 at 20:30, Benjamin Ikuta <benjaminikuta@gmail.com>
> wrote:
>
>>
>>
>> Was support for legacy TLS temporarily discontinued or something?
>>
>> I noticed I couldn't connect the other day, but now it seems I can again.
>>
>> For what it's worth, I strongly oppose any measure that makes Wikimedia
>> projects less accessible.
>>
>>
>>
>>
>> _______________________________________________
>> Wikimedia-l mailing list, guidelines at:
>> https://meta.wikimedia.org/wiki/Mailing_lists/Guidelines and
>> https://meta.wikimedia.org/wiki/Wikimedia-l
>> New messages to: Wikimedia-l@lists.wikimedia.org
>> Unsubscribe: https://lists.wikimedia.org/mailman/listinfo/wikimedia-l,
>> <mailto:wikimedia-l-request@lists.wikimedia.org?subject=unsubscribe>
> _______________________________________________
> Wikimedia-l mailing list, guidelines at: https://meta.wikimedia.org/wiki/Mailing_lists/Guidelines and https://meta.wikimedia.org/wiki/Wikimedia-l
> New messages to: Wikimedia-l@lists.wikimedia.org
> Unsubscribe: https://lists.wikimedia.org/mailman/listinfo/wikimedia-l, <mailto:wikimedia-l-request@lists.wikimedia.org?subject=unsubscribe>

_______________________________________________
Wikimedia-l mailing list, guidelines at: https://meta.wikimedia.org/wiki/Mailing_lists/Guidelines and https://meta.wikimedia.org/wiki/Wikimedia-l
New messages to: Wikimedia-l@lists.wikimedia.org
Unsubscribe: https://lists.wikimedia.org/mailman/listinfo/wikimedia-l, <mailto:wikimedia-l-request@lists.wikimedia.org?subject=unsubscribe>
Re: [Wikimedia-l] TLS [ In reply to ]
There comes a time at which "deprecated" has to turn into "no longer
supported". Unfortunately, there are inevitably some people left who that
will inconvenience, but without that, systems collapse under the weight of
providing legacy support for obsolete, rarely-used protocols.

If said obsolescence causes a security risk as well, there's really no
question to be had; has to be done.

Todd

On Sun, Nov 24, 2019 at 7:23 PM Benjamin Ikuta <benjaminikuta@gmail.com>
wrote:

>
>
> I use a second generation iPod Touch, which is incapable updating any
> further.
>
>
>
> On Nov 24, 2019, at 12:38 PM, Alex Monk <krenair@gmail.com> wrote:
>
> > Sounds like you may have been affected by
> > https://phabricator.wikimedia.org/T238038 which would've sent you to a
> page
> > like https://meta.wikimedia.org/sec-warning
> > Why are you attempting to connect using old versions of TLS?
> >
> > On Sun, 24 Nov 2019 at 20:30, Benjamin Ikuta <benjaminikuta@gmail.com>
> > wrote:
> >
> >>
> >>
> >> Was support for legacy TLS temporarily discontinued or something?
> >>
> >> I noticed I couldn't connect the other day, but now it seems I can
> again.
> >>
> >> For what it's worth, I strongly oppose any measure that makes Wikimedia
> >> projects less accessible.
> >>
> >>
> >>
> >>
> >> _______________________________________________
> >> Wikimedia-l mailing list, guidelines at:
> >> https://meta.wikimedia.org/wiki/Mailing_lists/Guidelines and
> >> https://meta.wikimedia.org/wiki/Wikimedia-l
> >> New messages to: Wikimedia-l@lists.wikimedia.org
> >> Unsubscribe: https://lists.wikimedia.org/mailman/listinfo/wikimedia-l,
> >> <mailto:wikimedia-l-request@lists.wikimedia.org?subject=unsubscribe>
> > _______________________________________________
> > Wikimedia-l mailing list, guidelines at:
> https://meta.wikimedia.org/wiki/Mailing_lists/Guidelines and
> https://meta.wikimedia.org/wiki/Wikimedia-l
> > New messages to: Wikimedia-l@lists.wikimedia.org
> > Unsubscribe: https://lists.wikimedia.org/mailman/listinfo/wikimedia-l,
> <mailto:wikimedia-l-request@lists.wikimedia.org?subject=unsubscribe>
>
> _______________________________________________
> Wikimedia-l mailing list, guidelines at:
> https://meta.wikimedia.org/wiki/Mailing_lists/Guidelines and
> https://meta.wikimedia.org/wiki/Wikimedia-l
> New messages to: Wikimedia-l@lists.wikimedia.org
> Unsubscribe: https://lists.wikimedia.org/mailman/listinfo/wikimedia-l,
> <mailto:wikimedia-l-request@lists.wikimedia.org?subject=unsubscribe>
_______________________________________________
Wikimedia-l mailing list, guidelines at: https://meta.wikimedia.org/wiki/Mailing_lists/Guidelines and https://meta.wikimedia.org/wiki/Wikimedia-l
New messages to: Wikimedia-l@lists.wikimedia.org
Unsubscribe: https://lists.wikimedia.org/mailman/listinfo/wikimedia-l, <mailto:wikimedia-l-request@lists.wikimedia.org?subject=unsubscribe>