Security News > 2020 > April > Browser Makers Delay Removal of TLS 1.0 and 1.1 Support

Browser Makers Delay Removal of TLS 1.0 and 1.1 Support
2020-04-02 15:22

TLS 1.0 is over two decades old, and TLS 1.1 was only meant to address some limitations in the former and prevent specific attacks.

In October 2018, major browser makers announced that support for the old and insecure TLS 1.0 and 1.1 protocol versions would be removed in March 2020, but such plans have been postponed due to the current COVID-19 pandemic.

As for the supported versions of Internet Explorer 11 and Microsoft Edge Legacy, the current plan involves removing support for TLS 1.0 and TLS 1.1 on September 8, 2020.

Although TLS 1.0 and 1.1 remain in use, site admins are advised to transition to TLS 1.2 or TLS 1.3 as soon as possible to ensure there are no disruptions when browsers remove support for the older protocols.

"While these protocols will remain available for customers to re-enable as needed, we recommend that all organizations move off of TLS 1.0 and TLS 1.1 as soon as is practical. Newer versions of the TLS protocol enable more modern cryptography and are broadly supported across modern browsers, such as the new Microsoft Edge," Microsoft said.


News URL

http://feedproxy.google.com/~r/Securityweek/~3/vMzTwgsR6D0/browser-makers-delay-removal-tls-10-and-11-support