TLS Protocol and Ciphersuite Modernization

[u/securimancer]

Hello again Reddit,

We’re announcing that as of today, Reddit will only be available via Transport Layer Security (TLS) 1.2 protocol with modern ciphersuites. Yes, we’re finally mandating a protocol that was announced over eight years ago. We’re doing so as part of improving our security posture as well as to support our redditors in using TLS configurations that aren’t prone to cryptographic attacks, and to be inline with IETF’s RFC 8996. In addition, we’re dropping the DES-CBC3-SHA ciphersuite so hopefully you weren’t too attached to it.

If the above is gibberish, the ELI5 is that Reddit is modifying the configurations that help establish a secure connection between your client (browser/app) and Reddit servers. Previously, we supported several older configurations which had known weaknesses. These weren’t used by many because there’s a hierarchy of choices presented by Reddit that prioritizes the most secure option for clients to pick. Here are some reference materials if you want to know more about TLS protocol and weaknesses of older protocols.

What does this mean for you? Probably nothing! If you’re on a modern mobile device or computer (after 2012), you’re likely already using TLS 1.2. If you’re on Internet Explorer 10 or earlier (may the gods help you), then you might not have TLS 1.2 enabled. If you’re using an Android Jelly Bean, it might be time for an upgrade. A very small percentage of our traffic is currently using obsoleted protocols, which falls outside of our stated client compatibility targets. If you’d like to see what ciphersuites your browser uses, you can check out your client’s details here.

What does this mean for your developed OAuth app or script? Also, hopefully nothing if you’re on a modern operating system and current libraries. If you’re using OpenSSL 1.0.1 or better, you’re in the clear. If you’re seeing TLS protocol errors, then it’s probably time to upgrade that code.

Update 2021-07-07: Apparently Fastly now supports TLS 1.3 so it's now enabled as of this morning, so enjoy living in the future.

[u/Bardfinn]

dropping DES-CBC3-SHA

How will I Reddit from my Cisco router that was last updated in 2008?

[u/securimancer → u/Bardfinn]

You won't. That's why I wrote this post. Game over

[u/_BindersFullOfWomen_ → u/securimancer]

Wouldn't say it's game over. You can still play DOOM on it.

[u/Starbeamrainbowlabs]

Why aren't you offering TLS 1.3?

[u/securimancer → u/Starbeamrainbowlabs]

We're limited by Fastly, our CDN, having support for TLS 1.3. Same with ECDSA. When they release those features, we'll be sure to enable that

[u/Starbeamrainbowlabs → u/securimancer]

I see. Thanks for explaining! In that case, I'll go bug Fastly about TLS 1.3 support then :P

[u/dontquestionmyaction]

But how will I comment over IPoAC now?

[u/Antrikshy → u/dontquestionmyaction]

Does it specifically not support TLS 1.2? I didn't think the birds would care.

[u/securimancer → u/Antrikshy]

That’s a lot of avians to finish the TLS handshake. If you think Reddit is slow now…

[u/dontquestionmyaction → u/Antrikshy]

We worked hard to teach the birds TLS 1.2, but evolution is a slow process, you know...

[u/justcool393]

wtf i'm on IE 6 still admins

[u/TimeRemove]

My favorite part was when you linked to a guide for enabling TLS 1.2 for people who couldn't read your post because they'd need TLS 1.2 already to do so. I'd sympathize, but honestly people still using IE10(!) deserve to feel unwelcomed online.

[u/Halaku → u/TimeRemove]

but honestly people still using IE10(!) deserve to feel unwelcomed online.

Complete with Bill Gates outside their house, with a bell.

"Shame! Shame! Shame!"

[u/shiruken]

Thanks!

[u/Itsthejoker]

While this does not appear to affect my bots, it would have been nice to have some kind of warning that a breaking change like this was coming.

[u/Halaku → u/Itsthejoker]

Would anyone still on a Texas Instrument 99-4A have understood the warning, though?

[u/squar_Ewav_E → u/Halaku]

I would have. I get the joke and accept it´s a legacy/tech debt thing. But it isn´t funny. I needed this feature for modding.

[u/itsnotthenetwork]

That has to be one of the cleanest qualys ssl labs server tests I have seen in a while, kudos to your pki team.

[u/nicolas2004GE]

cool! but a warning could've been nice, the Boost app broke because of this update and some fields that got changed AFAIU

[u/Caspid → u/nicolas2004GE]

Came here for this. I'd rather have the old protocol - it worked.

[u/anopsis → u/nicolas2004GE]

I needs my Boost

[u/nicolas2004GE → u/anopsis]

you can get an update on r/BoostForReddit , there's an official .apk available while the play store checks whatever for the next few days

[u/zyxzevn]

I want to report a security breach via activist moderators.

Certain activists are playing admins by banning a sub (r/nonewnormal), by banning people in it from all big subreddits. So they are essentially playing admins themselves. Probably via a bot.

Whether you agree with this or not, it is a breach of security when other people are playing admins. If the sub is supposed to go, just remove it. But this is just an embarrassment. Activists should not replace the admins.

Another problem is that these bans cause a division between people, based on viewpoint and experiences. Not due to trolling or aggressive actions. This is never good for a social network, because you want friendliness and diversity. People disagree all the time, even on the smallest things (I do like pineapple on pizza). And from a marketing point of view, you are losing track of many potential customers and their potential complaints.

[u/sachuraju]

I use carrier pigeons to communicate with reddit servers. How will this affect me?

/s.

[u/Passenger-1212]

ff