Hacker News Reader

On the client side I've been living with my browser set to accepting a minimum of v1.2 without issue for a long while, aside from the odd random page found in search but that's no loss.

I just recently tried bumping it up to the next version but so many sites don't support v1.3 yet, including HN.

View on HN

> so many sites don't support v1.3 yet, including HN.

That's not surprising. Distributions like Debian and Ubuntu do not have a recent enough version of OpenSSL in their stable package repository yet.

And even then, it can still take months to years until those distributions are upgraded to the latest stable version. They've got a few more years of support after the next stable all.

Ubuntu 18.04, the newest LTS, recently backported OpenSSL 1.1.1 to its stable package repository.

Because of this my personal webserver, running nginx on Ubuntu 18.04, started offering TLS 1.3 without any manual action on my part, because the server is configured to auto-apply updates from these repositories.

Reply on news.ycombinator.com