On 14 June 2013 13:57, Rob Stradling <rob.stradl...@comodo.com> wrote: > On 14/06/13 12:31, Ben Laurie wrote: >> >> On 14 June 2013 12:25, Rob Stradling <rob.stradl...@comodo.com> wrote: > > <snip> > >>> Ah, so you're criticizing Apple for not being willing to force all OSX >>> 10.8.x users to update to 10.8.4. >> >> >> No. >> >>> If OSX 10.8.x has a mechanism that allows Apple to force updates to be >>> installed, then I agree. But my suspicion is that it doesn't, and if so, >>> Apple's willingness isn't the key issue here. >> >> >> It has a mechanism to nag you endlessly until you do install updates. >> Which makes me wonder why you think people won't install the OS >> update? > > > Safari's User-Agent string reveals the OSX version that it is running on. A > few weeks ago I analyzed some webserver logs to get an idea of historical > OSX update rates. Based on that analysis, I forecast that the majority of > OSX 10.8.x users will install the 10.8.4 update, but that a significant > minority won't.
I guess then we need to know why? And would they upgrade Safari alone? > > >>>>> No server administrator will want to deploy ECDHE-ECDSA if it means >>>>> breaking >>>>> compatibility with even a small fraction of deployed browsers. Hence >>>>> why >>>>> this patch is, unfortunately, necessary. >>>> >>>> >>>> >>>> What is _necessary_ is that Apple accept responsibility for their errors >>>> :-) >>> >>> >>> >>> Agreed. >>> >>> Sadly, the OSX 10.8.4 changelog doesn't even mention the ECDHE-ECDSA >>> bugfix. >>> >>> >>>> Why are we chasing after them cleaning up their messes? >>> >>> >>> >>> Because we want ECDHE-ECDSA to be deployable. >>> >>> >>> -- >>> Rob Stradling >>> Senior Research & Development Scientist >>> COMODO - Creating Trust Online >>> >> > > -- > Rob Stradling > Senior Research & Development Scientist > COMODO - Creating Trust Online > Office Tel: +44.(0)1274.730505 > Office Fax: +44.(0)1274.730909 > www.comodo.com > > COMODO CA Limited, Registered in England No. 04058690 > Registered Office: > 3rd Floor, 26 Office Village, Exchange Quay, > Trafford Road, Salford, Manchester M5 3EQ > > This e-mail and any files transmitted with it are confidential and intended > solely for the use of the individual or entity to whom they are addressed. > If you have received this email in error please notify the sender by > replying to the e-mail containing this attachment. Replies to this email may > be monitored by COMODO for operational or business reasons. Whilst every > endeavour is taken to ensure that e-mails are free from viruses, no > liability can be accepted and the recipient is requested to use their own > virus checking software. ______________________________________________________________________ OpenSSL Project http://www.openssl.org Development Mailing List openssl-dev@openssl.org Automated List Manager majord...@openssl.org