Ask HN: Should my site support Windows XP?

[amingilani]

I'm using Cloudflare's universal SSL on Nazdeeq.com, and a ticket was opened about Windows XP support.

Windows XP was released in 2001, and reached EOL on 2011.

My SSL certificate gives a handshake error on Windows XP, but gets an A+ rating on SSLLabs.com

Adding support for Windows XP means switching to LetsEncrypt certificates that would reduce my rating to an A.

Is this a wise decision to make?

[T-A]

How likely is somebody still using Windows XP (6.5% of all desktop users, according to [1]; most of them Chinese running pirated copies, I would guess) to buy what you are selling?

[1] https://www.netmarketshare.com/operating-system-market-share...

[amingilani]

You make a fair point. However, since I'm in Pakistan, I found one person I wanted to demo the site to that uses Windows XP :/

I was super surprised when that happened.

[tialaramex]

The certificate has basically nothing to do with anything here. It's a bad sign that you've convinced yourself that's relevant to your problem.

The usual issue with Windows XP (specifically Internet Explorer on XP since e.g. Firefox works fine) is that it doesn't do Server Name Indication. Without SNI it isn't possible to implement virtual hosts for HTTPS sensibly. The only option is to assign a dedicated IPv4 address for each site to be hosted.

Cloudflare can do that for you, but they will charge. If it's important to have Windows XP Internet Explorer work, you should pay Cloudflare for one of the commercial options that they spell out as supporting Windows XP specifically.

Switching to Let's Encrypt won't make any difference to whether Windows XP works with your site _or_ to the SSL Labs score.