Bug 197208 - Log a message when a site is only supporting TLS 1.0 or 1.1
Summary: Log a message when a site is only supporting TLS 1.0 or 1.1
Status: NEW
Alias: None
Product: WebKit
Classification: Unclassified
Component: Web Inspector (show other bugs)
Version: Safari 12
Hardware: Unspecified Unspecified
: P2 Normal
Assignee: Nobody
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2019-04-23 13:01 PDT by Mike Taylor
Modified: 2019-04-23 13:01 PDT (History)
1 user (show)

See Also:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Mike Taylor 2019-04-23 13:01:31 PDT 
It would be nice if Safari Web Inspector could log a message for sites that are running on TLS 1.0 or 1.1.

As we get closer to disabling TLS 1.0 and 1.1, we should log a message to the console for sites that do not speak TLS 1.2 (or 1.3), and link to a useful resource, perhaps https://webkit.org/blog/8462/deprecation-of-legacy-tls-1-0-and-1-1-versions/, and better docs in the future as we have them.

We just landed a similar thing in Firefox, see https://bugzilla.mozilla.org/show_bug.cgi?id=1512505, the message we ended up with was: "This site uses a deprecated version of TLS that will be disabled in March 2020. Please upgrade to TLS 1.2 or 1.3."