I was not able to download PDFs from the website with either Chrome or IE until I re-enabled SSL 3.0 and TLS 1.0. I had turned off these protocols due to vulnerabilities discovered over a year ago. See https://www.ssl.com/article/poodle-flaw-grows-bigger-tls-affected/ for background on this.
Paizo really should turn off those protocols on their servers if not because of the security risk, but because browser are dropping support for those protocols.
Paizo.com stopped supporting TLS 1.0 last June, unless something got reset when they installed the new hardware.
System Administrator
|
| 1 person marked this as a favorite. |
Due to some hardware and software limitations and the fact that the watermarker servers do little else besides passing out those files, we hadn't made it a priority to push for that and it allowed some of the people on android devices to use it to download those files. As I place new boxes, I will be recompiling apache and setting those up with TLSv1.1 and TLSv1.2 and Perfect Forward Secrecy.