TLS 1.3

[Azareal]

https://kinsta.com/blog/tls-1-3
TLS 1.3 was standardised.

TLS is the successor to SSL and is used in HTTPS connections.
Version 1.3 eliminates some less secure legacy algorithms and helps to make things faster by eliminating a round-trip where possible.

 

[Scarlharp]

Do browsers yet automatically default to HTTPS or does a htaccess rule/whatever still need to be set most of the time? Just wondering

 

[Azareal]

Do browsers yet automatically default to HTTPS or does a htaccess rule/whatever still need to be set most of the time? Just wondering

You add the certificate to the server's configuration file, I believe.
Let's Encrypt (a non-profit organisation) and Cloudflare provide certificates for free.
Some servers automatically handle the renewal process for Let's Encrypt.

If it's a shared host, then the control panel apparently has a thing for setting it up.

https://istlsfastyet.com/#server-performance
This shows which servers have TLS 1.3, I did notice them working on it for Go, so it'll probably arrive sooner or later there, dunno about the others.

 

[Scarlharp]

Ah, so you still have to manually do stuff server-side in order to HTTPS redirect. I thought by now browsers would attempt to connect through HTTPS before HTTP 😛