Security News > 2023 > September > Microsoft reminds users Windows will disable insecure TLS soon

Microsoft reminded users that insecure Transport Layer Security 1.0 and 1.1 protocols will be disabled soon in future Windows releases.

The original TLS 1.0 specification and its TLS 1.1 successor have been used for nearly two decades, with TLS 1.0 initially introduced in 1999 and TLS 1.1 in 2006).

Following extensive discussions and the development of 28 protocol drafts, the Internet Engineering Task Force approved in March 2018 the next major version of the TLS protocol, TLS 1.3.

"Windows 11 Insider Preview builds starting in September 2023 will have TLS versions 1.0 and 1.1 disabled by default. There is an option to re-enable TLS 1.0 or TLS 1.1 for users who need to maintain compatibility."

Although the option to re-enable insecure TLS via Windows Registry will still be available, it should only be done as a last-ditch effort until incompatible apps can be updated or replaced.

By August 2020, Microsoft had toggled on TLS 1.3 by default in Windows 10 Insider builds.

News URL

https://www.bleepingcomputer.com/news/microsoft/microsoft-reminds-users-windows-will-disable-insecure-tls-soon/