TLS protocol version

[yaxattax]

Hi,

It is great that the entire site is ran over TLS. I wish more would. However, I have a problem to browse because the maximum TLS level served by this site is 1.0 (which is really, really old). Please, if possible, enable TLS 1.1 and TLS1.2.

Thanks

[Aleron Ives]

Aside from protecting your login credentials, I'm not entirely sure why the forum is encrypted at all, considering the information here is publicly visible.

[yaxattax]

Assuming a non-flawed PKI (which is a bit of a big assumption, but it is the best we have at the moment), and given the EV certificate, it serves to verify that the content is coming from who it says its coming from (Dolphin team).

There is another dolphin emulator website which is not the same as this one. We can be pretty sure when getting builds from here that it is from the dolphin team and not an imposter, and provided we trust the dolphin team, that the builds are not malware infected, for example. Another benefit would be to prevent session hijacking through cookie replays, assuming no other mechanism exists to obtain the user's login cookie. It is not just the forum that is encrypted, the whole website is available only via TLS.

In general, I am in favour of running the entire web encrypted, so its great to see these guys have made a start, it is just too bad that the encryption in use is somewhat broken.

I would be happy to offer assistance to the site admin if it is a difficulty in time, or other issues such as compatibility.

p.s. Hi Aleron