[Webkit-unassigned] [Bug 202156] [GTK] Unable to load page due to TLS errors

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=202156

--- Comment #2 from Carlos Alberto Lopez Perez <clopez at igalia.com> ---
Summarizing:

* That site uses very insecure TLS settings, the best thing it supports its TLS-1.0 with 3DES (which is completely insecure nowadays).
* I think this is not a webkitgtk issue. WebKit is simply using the system-wide crypto policy which nowadays forbid to use such insecure cipher suites. WebKit would work on an old distro with outdated crypto policy.
* Not even curl on my system wants to connect to that site due to that poor TLS 
settings.
* However, chrome and firefox still accept connecting with such settings. Not sure why. It will be better if they refused so the webmaster is forced to upgrade that server.

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20190925/9a6a2e7b/attachment.html>