Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Netflix now supports TLS 1.3

netflixtechblog.com

Post reply on HN
Print view View original

61–70 of 141 posts

Re: Netflix now supports TLS 1.3

#61

Post by Avamander »

mimsee wrote: post #42
jiggawatts wrote: post #33

[flagged]

How's it not 4K? You need to use Windows 10 Creator update or newer and the Edge browser (most likely the old one and not the newer Chromium based). You need an Intel 7th generation CPU (i3, i5, or i7) or an Nvidia GPU.[1][2] [1]: https://help.netflix.com/en/node/23931 [2]: https://nvidia.custhelp.com/app/answers/detail/a_id/4583/~/4...

For those not on Windows and without a very specific hardware setup, 4K and even 1080p is unattainable. I understand the annoyance the person you replied to feels.

Re: Netflix now supports TLS 1.3

#62

Post by georgyo »

shawnz wrote: post #54
georgyo wrote: post #25

Earlier quoted context omitted.

If no clients support it, and you can't tell as a user if it is working, then effectively no one is using it.

Firefox supports it, although currently only as a configurable. Users can test their ESNI support online here: https://www.cloudflare.com/ssl/encrypted-sni/

It is enabled and working in _my_ firefox.

But, I encourage you to try to get it working in _your_ firefox, where that site says you are in fact using ESNI. It is trickier than just enabling a flag.

If you think this means people are using it, sure. Firefox has ~9% of market share, and a very small percent (maybe 0.1%) of those users have correctly configured this, and when those users visit a page hosted by cloudflare they will may be use ESNI. That is in fact more than zero users. It is a very very small number today, but hopefully it will grow in the future.

And while that page you link tests ESNI, I cannot verify that any other domain supports ESNI. I am unaware of any tooling that lets me test that today.

Re: Netflix now supports TLS 1.3

#63

Post by saurik »

__s wrote: post #56

Can someone explain why this thread is full of people not caring about security? This article even goes over how TLS 1.3 is a perf improvement Have the anti privacy crowd come out in droves now that we have a public desire for contact tracing & there's a desire to scapegoat why netflix et al have reduced stream quality due to increased load? & HTTP is not an option. I for one enjoy my ISP not being able to inject ads…

I don't really see many people on this post arguing against encryption entirely... and the article isn't vs HTTP, it is about an upgrade to a new version of TLS; so it kind of feels like you are just cherrypicking a few comments in order to hit at a rather fascinating strawman agenda / conspiracy theory: is there even a single comment here--other than yours ;P--poking at Netflix over reduced stream quality due to the pandemic?

Re: Netflix now supports TLS 1.3

#64

Post by crazygringo »

__s wrote: post #56

Can someone explain why this thread is full of people not caring about security? This article even goes over how TLS 1.3 is a perf improvement Have the anti privacy crowd come out in droves now that we have a public desire for contact tracing & there's a desire to scapegoat why netflix et al have reduced stream quality due to increased load? & HTTP is not an option. I for one enjoy my ISP not being able to inject ads…

I'm as confused as you are.

My guess is some people have a greater hatred for DRM, which makes Netflix "bad", and so anything Netflix does security-wise that isn't removing DRM becomes irrelevant.

But those comments seem to be mostly downvoted now anyways, so they don't seem to be representative.

Re: Netflix now supports TLS 1.3

#65

Post by KingMachiavelli »

__s wrote: post #56

Can someone explain why this thread is full of people not caring about security? This article even goes over how TLS 1.3 is a perf improvement Have the anti privacy crowd come out in droves now that we have a public desire for contact tracing & there's a desire to scapegoat why netflix et al have reduced stream quality due to increased load? & HTTP is not an option. I for one enjoy my ISP not being able to inject ads…

Agreed. I've been blocking HTTP (on port 80) accross my network and I reroute all DNS traffic to a pihole configured to use DoT. At this point in time there is really no reason to let anyone see plain text traffic.

A few things are whitelisted but the handful of things that break aren't necessary anyway.

Re: Netflix now supports TLS 1.3

#66

Post by __s »

saurik wrote: post #63
__s wrote: post #56

Can someone explain why this thread is full of people not caring about security? This article even goes over how TLS 1.3 is a perf improvement Have the anti privacy crowd come out in droves now that we have a public desire for contact tracing & there's a desire to scapegoat why netflix et al have reduced stream quality due to increased load? & HTTP is not an option. I for one enjoy my ISP not being able to inject ads…

I don't really see many people on this post arguing against encryption entirely... and the article isn't vs HTTP, it is about an upgrade to a new version of TLS; so it kind of feels like you are just cherrypicking a few comments in order to hit at a rather fascinating strawman agenda / conspiracy theory: is there even a single comment here--other than yours ;P--poking at Netflix over reduced stream quality due to the…

Those comments have now been downvoted compared to an hour ago. I want to give good faith those comments aren't trolling, & so I personally don't think they should be downvoted

https://news.ycombinator.com/item?id=22933774

https://news.ycombinator.com/item?id=22934040

https://news.ycombinator.com/item?id=22934379

Maybe these comments appear first because they're less likely to've read through the article. Otherwise it'd have to be something to do with the demographic of people watching /newest. But it was posted 4 hours before I made my initial post, so I don't know

Re: Netflix now supports TLS 1.3

#67

Post by cbg0 »

michaelt wrote: post #47
mimsee wrote: post #42

Earlier quoted context omitted.

How's it not 4K? You need to use Windows 10 Creator update or newer and the Edge browser (most likely the old one and not the newer Chromium based). You need an Intel 7th generation CPU (i3, i5, or i7) or an Nvidia GPU.[1][2] [1]: https://help.netflix.com/en/node/23931 [2]: https://nvidia.custhelp.com/app/answers/detail/a_id/4583/~/4...

> How's it not 4K? Many people report Netflix's 4k is very heavily compressed compared to 4k blu-ray, making it high quality in name only. I wouldn't know, because Netflix won't serve 4k content to any of my devices.

> Many people report Netflix's 4k is very heavily compressed compared to 4k blu-ray, making it high quality in name only.

This is quite true, and it is to be expected from a streaming service that wants to deliver 4K video over most Internet connections. They stream 4K at around 15mbps to my LG TV, meanwhile a blu-ray's video stream would go above 50mbps typically.

There is definitely also a cost component to take into account when you have over 160M paying accounts to deliver content to.

Re: Netflix now supports TLS 1.3

#68

Post by upofadown »

__s wrote: post #56

Can someone explain why this thread is full of people not caring about security? This article even goes over how TLS 1.3 is a perf improvement Have the anti privacy crowd come out in droves now that we have a public desire for contact tracing & there's a desire to scapegoat why netflix et al have reduced stream quality due to increased load? & HTTP is not an option. I for one enjoy my ISP not being able to inject ads…

Any change can and should be questioned as to if it actually improves things.

Re: Netflix now supports TLS 1.3

#69

Post by stuff4ben »

While I really liked that they're moving to fully secure TLS 1.3, I was more impressed by their A/B testing. I find it fascinating they can segment their traffic by device AND then be able to deliver separate streams of content. It's something I've wanted to do at many companies I've worked at but we never had the data to begin with in order to do that. Always another fire to put out...

Re: Netflix now supports TLS 1.3

#70

Post by saurik »

__s wrote: post #66
saurik wrote: post #63

Earlier quoted context omitted.

I don't really see many people on this post arguing against encryption entirely... and the article isn't vs HTTP, it is about an upgrade to a new version of TLS; so it kind of feels like you are just cherrypicking a few comments in order to hit at a rather fascinating strawman agenda / conspiracy theory: is there even a single comment here--other than yours ;P--poking at Netflix over reduced stream quality due to the…

Those comments have now been downvoted compared to an hour ago. I want to give good faith those comments aren't trolling, & so I personally don't think they should be downvoted https://news.ycombinator.com/item?id=22933774 https://news.ycombinator.com/item?id=22934040 https://news.ycombinator.com/item?id=22934379 Maybe these comments appear first because they're less likely to've read through the article. Otherwise i…

Yes: I did find those comments; I am even downthread of one of those comments myself, talking about the fascinating limitations of encryption: I simply do not consider three or four comments to be a thread "full of" such comments (and my mental model of this thread, as well as my own involvement, is from well before your comment, which seems to have now hijacked the first position on this post as people I guess like upvoting complaints about other commenters).
Post reply on HN