What about writing in xml without any passion ?

Bleepers

Seems you’re the one who doesn’t understand what a rhetorical question is. Hint - it’s not what you retrospectively call a question when you get called out on your laziness.

Nor is it rhetorical when you ask a question and then spend several lines going on about it, and making it clear that you really did want to talk about an answer.

The important bit:

Simen said he believes the STS design is based on a fundamental misinterpretation of the TLS specification. Microsoft’s description of STS acknowledges that some SSL implementations don’t put the current system time of the server in the ServerUnixTime field at all. Instead, these implementations—most notably the widely used OpenSSL code library starting in 2014—populate the field with random values. Microsoft’s description goes on to say, “We have observed that most servers provide a fairly accurate value in this field and the rest provide random values.”

“The false assumption is that most SSL implementations return the server time,” Simen said. “This was probably true in a Microsoft-only ecosystem back when they implemented it, but at that time [when STS was introduced], OpenSSL was already sending random data instead.”

I thought tablet, then I thought the post was about the way they were bending the tablet’s screen with their thumb, then I finally realised it was paper. Holding a printout of a screen shot just didn’t enter my mind.