Polverone
Now celebrating 21 years of madness
Posts: 3186
Registered: 19-5-2002
Location: The Sunny Pacific Northwest
Member Is Offline
Mood: Waiting for spring
|
|
Windows XP use
I am planning on using <a href="https://letsencrypt.org/">Let's Encrypt</a> instead of a self-signed certificate for HTTPS on the site
once the Let's Encrypt initiative is out of beta. However, I recently learned that the Let's Encrypt certificates do not work for IE or Chrome under
Windows XP. Firefox under XP works, but I don't know if that is a major inconvenience for site users. It is not clear if this problem will be fixed
before Let's Encrypt exits beta status.
How many people here are still visiting the site using XP? If you are using XP, is it an inconvenience to visit the site with Firefox instead of
another browser?
Technical details of the XP problem here: https://community.letsencrypt.org/t/help-needed-windows-xp-s...
PGP Key and corresponding e-mail address
|
|
Zephyr
Hazard to Others
Posts: 341
Registered: 30-8-2013
Location: Seattle, WA
Member Is Offline
|
|
Hooray! Does this mean no more security warnings?
|
|
Volanschemia
Hazard to Others
Posts: 340
Registered: 16-1-2015
Location: Victoria, Australia
Member Is Offline
Mood: Pretty much all of them!
|
|
Excellent! Looks like very little people use XP anymore though, going off the poll so far.
"The chemists are a strange class of mortals, impelled by an almost insane impulse to seek their pleasures amid smoke and
vapor, soot and flame, poisons and poverty; yet among all these evils I seem to live so sweetly that may I die if I were to change places with the
Persian king" - Johann Joachim Becher, 1635 to 1682.
|
|
blogfast25
International Hazard
Posts: 10562
Registered: 3-2-2008
Location: Neverland
Member Is Offline
Mood: No Mood
|
|
Voted.
|
|
hyfalcon
International Hazard
Posts: 1003
Registered: 29-3-2012
Member Is Offline
Mood: No Mood
|
|
I'm stuck in Colorado away from my big computers. I'm dealing with an old XP machine for now. I always use Firefox.
|
|
Oscilllator
National Hazard
Posts: 659
Registered: 8-10-2012
Location: The aqueous layer
Member Is Offline
Mood: No Mood
|
|
Pfffffft, whindows XP? Next you'll be asking if I ride a horse to work!
|
|
Polverone
Now celebrating 21 years of madness
Posts: 3186
Registered: 19-5-2002
Location: The Sunny Pacific Northwest
Member Is Offline
Mood: Waiting for spring
|
|
Yes, Let's Encrypt will produce certificates that conform to browser expectations. The actual difference in security will be minimal in most
situations, but it should make use of HTTPS more comfortable since you won't have to manually accept the certificate over your browser's objections.
PGP Key and corresponding e-mail address
|
|
The Volatile Chemist
International Hazard
Posts: 1981
Registered: 22-3-2014
Location: 'Stil' in the lab...
Member Is Offline
Mood: Copious
|
|
I use XP on a laptop I have for portable applications and SSH and browsing forums. My main computer used to have XP as well. I always use firefox, so
it won't bother me. But will it effect browsing on a Raspberry Pi (Raspbian/Debian default browser)? I assume not, and I can always use the main site,
but just curious if anyone knew.
|
|
crystal grower
Hazard to Others
Posts: 474
Registered: 3-1-2016
Location: Os Petrosum
Member Is Offline
Mood: Puzzled
|
|
Does it mean that browsing Smadness with firefox + windows XP will work properly?
|
|
The Volatile Chemist
International Hazard
Posts: 1981
Registered: 22-3-2014
Location: 'Stil' in the lab...
Member Is Offline
Mood: Copious
|
|
Yes, it will.
|
|
DrEvidence
Harmless
Posts: 37
Registered: 25-4-2018
Member Is Offline
Mood: No Mood
|
|
That certificate problem is stupid as hell. Does not make sense. If Chrome and IE on Windows XP can't use some certificates, actually encryption
algorithms which are not secure enough, then why in a hell facebook, instagram, google, youtube, wikipedia, wikihow, and billions of most famous
websites work properly?
Actually Microsoft reacted to this problem recently by making an update for Windows PosReady 2009, which is almost same as Windows XP SP3. And using
the famous registry hack we can install such updates.
https://cloudblogs.microsoft.com/microsoftsecure/2017/10/05/...
https://support.microsoft.com/en-us/help/4019276/update-to-a...
Worst of all, it just doesn't work. Sounds good tough. Good for advertisement maybe, but not practical or useful. I think the reason why it doesn't
work is because Internet Explorer 6, 7, 8 don't support TLS 1.1 and 1.2. And Chrome uses Internet Explorer settings, while Firefox works independantly
of IE and OS cryptographic libraries.
[Edited on 2-5-2018 by DrEvidence]
|
|
AlexC
banned
Posts: 15
Registered: 11-7-2018
Member Is Offline
Mood:
|
|
Actually it was never about TLS version. But maybe about : cipher suite or key exchange algorithm. Don't know which are exactly supported. On my
windows xp sp3, chrome (49.0.2623.112) works. Still some sites like androidfrog.com doon't. But that is probably because they changed something with
your cert.
Also Internet Download Manager (IDM) won't work on xp for many https sites, so they written fake useless tutorial how to fix that: http://www.internetdownloadmanager.com/support/xp-https-prob...
According to that update (KB3055973) info: "Adds support for TLS 128-bit & 256-bit Advanced Encryption Standard (AES) cipher suites ".
I did not install any update after sp3, although I know there are about 133 updates available.
I tried POSReady2009 + all updates (about 300) and trust me androidfrog.com and idm still don't work. Firefox never has problems. My advice is to use
"internet download accelerator" as download manager instead of "internet download manager" or "free download maanger". Just like firefox, it works
with all sites. Also has option to preserve disk space before downloading file, to preview videos/movies after they have downloaded at least 3 %. Etc.
Also my advice is to never use POSReady2009, Windows XP Embedded, Windows Embedded Standard, etc, because they have many issues, many stuff lacks, and
nothing is almost compatible. For example virtualbox doesn't work on posready2009. Windows XP Pro x86 is most compatible.
Also people who have issues with windows xp activation, actually there is VOL edition of xp, along with 1000 other original os'es here: https://the-eye.eu/public/MSDN/
Just use this one https://the-eye.eu/public/MSDN/Windows%20XP/en_windows_xp_pr...
And use this cd key: M6TF9-8XQ2M-YQK9F-7TBB2-XGG88 and your os will be activated without need for internet or telephone or hack tools like AntiWPA.
Also you can activate microsoft office 2007 the same way, using cd key only. But it has to be this cd: https://the-eye.eu/public/MSDN/Office%202007/en_office_enter... and use this key: KGFVY-7733B-8WCK9-KTG64-BC7D8
Both that CDs contain VL in their name. That is something about volume licensing, easiest method of activation. Also verify if your os is original or
infected by me so i can spy you: http://www.heidoc.net/php/myvsdump.php
[Edited on 14-7-2018 by AlexC]
|
|
AlexC
banned
Posts: 15
Registered: 11-7-2018
Member Is Offline
Mood:
|
|
Here's example where idm and fdm don't work. And ida works.
|
|