Re: httpd vs TLS

Mateusz Kocielski <[email protected]> Fri, 18 Mar 2016 08:05:51 +0000

Newsgroups	gmane.os.netbsd.devel.security
Message-ID	<[email protected]>

On Fri, Mar 18, 2016 at 08:58:53AM +0100, Thomas Klausner wrote:
> On Fri, Mar 18, 2016 at 07:31:02AM +0000, Mateusz Kocielski wrote:
> > Do we realy want to refuse all clients listed in "handshake simulation" here?:
> > 
> > https://www.ssllabs.com/ssltest/analyze.html?d=wip.pkgsrc.org&s=195.22.142.117&hideResults=on
> 
> That does list iOS 9, but I can connect from an iOS 9 device without
> problems. So I wonder how correct it is.

The list contains two iOS9 connection - first one which use Safari 9 on iOS 9
(that works fine) and Apple ATS 9 / iOS 9 which can't connect. (Apple ATS is
described here:
https://developer.apple.com/library/prerelease/ios/releasenotes/General/WhatsNewIniOS/Articles/iOS9.html

 Mateusz