Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Netflix now supports TLS 1.3

netflixtechblog.com

Post reply on HN
Print view View original

81–90 of 141 posts

Re: Netflix now supports TLS 1.3

#81

Post by azinman2 »

stronglikedan wrote: post #78
__s wrote: post #56

Can someone explain why this thread is full of people not caring about security? This article even goes over how TLS 1.3 is a perf improvement Have the anti privacy crowd come out in droves now that we have a public desire for contact tracing & there's a desire to scapegoat why netflix et al have reduced stream quality due to increased load? & HTTP is not an option. I for one enjoy my ISP not being able to inject ads…

> netflix et al have reduced stream quality due to increased load OT, but why am I still paying full price for less-than-full quality? Same with Amazon - why am I paying for two-day Prime shipping even though it's impossible to get that level of service right now? /rant

Because a black swan event has occurred, life is anything but normal right now, and people are generally concerned about things that are far more important.

Re: Netflix now supports TLS 1.3

#82

Post by stronglikedan »

azinman2 wrote: post #81
stronglikedan wrote: post #78

Earlier quoted context omitted.

> netflix et al have reduced stream quality due to increased load OT, but why am I still paying full price for less-than-full quality? Same with Amazon - why am I paying for two-day Prime shipping even though it's impossible to get that level of service right now? /rant

Because a black swan event has occurred, life is anything but normal right now, and people are generally concerned about things that are far more important.

I understand that, but it's trivial for them to temporarily reduce the amount they're charging me, since I'm not getting what I'm paying for. I'd see it as them during their part to help the people in this crisis. But alas, I digress, as it was just an opportunistic rant, and I feel better for getting it out.

Re: Netflix now supports TLS 1.3

#83

Post by jandrese »

mimsee wrote: post #42
jiggawatts wrote: post #33

[flagged]

How's it not 4K? You need to use Windows 10 Creator update or newer and the Edge browser (most likely the old one and not the newer Chromium based). You need an Intel 7th generation CPU (i3, i5, or i7) or an Nvidia GPU.[1][2] [1]: https://help.netflix.com/en/node/23931 [2]: https://nvidia.custhelp.com/app/answers/detail/a_id/4583/~/4...

Every time I read a requirements list like this I remind myself that the pirated version works without hassle.

Re: Netflix now supports TLS 1.3

#84

Post by vinay_ys »

stronglikedan wrote: post #82
azinman2 wrote: post #81

Earlier quoted context omitted.

Because a black swan event has occurred, life is anything but normal right now, and people are generally concerned about things that are far more important.

I understand that, but it's trivial for them to temporarily reduce the amount they're charging me, since I'm not getting what I'm paying for. I'd see it as them during their part to help the people in this crisis. But alas, I digress, as it was just an opportunistic rant, and I feel better for getting it out.

You have the option to opt into a SD only plan, don't you?

Re: Netflix now supports TLS 1.3

#85

Post by toomuchtodo »

vinay_ys wrote: post #84
stronglikedan wrote: post #82

Earlier quoted context omitted.

I understand that, but it's trivial for them to temporarily reduce the amount they're charging me, since I'm not getting what I'm paying for. I'd see it as them during their part to help the people in this crisis. But alas, I digress, as it was just an opportunistic rant, and I feel better for getting it out.

You have the option to opt into a SD only plan, don't you?

Reduces the number of simultaneous streams from 2 to 1 as well.

Re: Netflix now supports TLS 1.3

#86

Post by stronglikedan »

vinay_ys wrote: post #84
stronglikedan wrote: post #82

Earlier quoted context omitted.

I understand that, but it's trivial for them to temporarily reduce the amount they're charging me, since I'm not getting what I'm paying for. I'd see it as them during their part to help the people in this crisis. But alas, I digress, as it was just an opportunistic rant, and I feel better for getting it out.

You have the option to opt into a SD only plan, don't you?

Of course, but that's comparing apples to oranges, so not really relevant.

Re: Netflix now supports TLS 1.3

#87

Post by vinay_ys »

It is interesting to see the experiment results with 7%-8% improvements in media rebuffers with just moving from 1-RTT to 0-RTT. Wonder if they ever considered having only one layer of encryption instead of two (TLS and DRM). Would that save more CPU and hence avoid media rebuffers lot more?

Re: Netflix now supports TLS 1.3

#88

Post by stjohnswarts »

stronglikedan wrote: post #78
__s wrote: post #56

Can someone explain why this thread is full of people not caring about security? This article even goes over how TLS 1.3 is a perf improvement Have the anti privacy crowd come out in droves now that we have a public desire for contact tracing & there's a desire to scapegoat why netflix et al have reduced stream quality due to increased load? & HTTP is not an option. I for one enjoy my ISP not being able to inject ads…

> netflix et al have reduced stream quality due to increased load OT, but why am I still paying full price for less-than-full quality? Same with Amazon - why am I paying for two-day Prime shipping even though it's impossible to get that level of service right now? /rant

Because that's life during a national emergency. If you don't want to pay it then stop paying it, NF and Amazon will let that happen. I assume Amazon might even prorate your refund.

Re: Netflix now supports TLS 1.3

#89

Post by labawi »

user5994461 wrote: post #75
tfigment wrote: post #71

Earlier quoted context omitted.

Genuine question: Do you not have issues with browsers and other security products and OCSP? At work they blocked all internet access and tools that forced use of CRL and OCSP lost their minds. Digicert and other CAs seem to to use port 80 for this. Firefox requires OCSP option to be disabled for me for GitHub to work with pauses.

OCSP is broken by design. Should turn it off for server applications. Maybe even disable it entirely when compiling openssl if possible. OCSP is to query random CA web servers when opening a SSL connection to verify if the certificate in use was revoked. It's broken by design because servers simply don't have internet access.

OCSP with server-side stapling and must-staple marked certificates should work fine for most use cases.

Re: Netflix now supports TLS 1.3

#90

Post by oh_sigh »

stronglikedan wrote: post #78
__s wrote: post #56

Can someone explain why this thread is full of people not caring about security? This article even goes over how TLS 1.3 is a perf improvement Have the anti privacy crowd come out in droves now that we have a public desire for contact tracing & there's a desire to scapegoat why netflix et al have reduced stream quality due to increased load? & HTTP is not an option. I for one enjoy my ISP not being able to inject ads…

> netflix et al have reduced stream quality due to increased load OT, but why am I still paying full price for less-than-full quality? Same with Amazon - why am I paying for two-day Prime shipping even though it's impossible to get that level of service right now? /rant

I'm fairly certain that neither Amazon nor Netflix promise you anything more than best effort on their streaming quality or delivery time.

You can always cancel your contract with them if you don't like it.

Post reply on HN