What it doesn't do, is force good TLS - there's nothing to stop a site using a weak algorithm, SSLv2/3, or old TLS versions.
It also wrecks network-level caching using appliances like Squid.
TLS 1.0 and 1.1 were disabled in Firefox 78 in June.
What it doesn't do, is force good TLS - there's nothing to stop a site using a weak algorithm, SSLv2/3, or old TLS versions.
It also wrecks network-level caching using appliances like Squid.