[ad_1]
Apple, Google, Microsoft, and Mozilla today announced their intention to disable support for Transport Layer Security (TLS) 1.0 and 1.1 media in their respective browsers during the first half of 2020.
"January 19th of next year marks the 20th anniversary of TLS 1.0, the inaugural version of the protocol that encrypts and authenticates secure connections over the Web," said Kyle Pflug, Programming Manager for Microsoft Edge.
"Two decades is a long time for unmodified security technology," he said. "Although we are not aware of significant vulnerabilities with our recent implementations of TLS 1.0 and TLS 1.1 […] switching to new versions helps secure the web for everyone. "
This initiative comes as the Internet Engineering Task Force (IETF) – the organization that develops and promotes Internet standards – holds discussions to formally disapprove TLS 1.0 and 1.1 standards.
The four browsers – Chrome, Edge, IE, Firefox and Safari – already support TLS 1.2 and will soon support the recently approved version of the TLS 1.3 standard. Chrome and Firefox already support TLS 1.3, while Apple and Microsoft are still working on support.
Microsoft cited public statistics from SSL Labs, which show that 94% of websites have already adopted TLS 1.2, leaving very few sites on older standard versions.
"Less than one percent of daily connections in Microsoft Edge use TLS 1.0 or 1.1," Pflug said, also citing internal statistics.
Windows users and system administrators can test the impact of disabling TLS 1.0 and TLS 1.1 immediately and preparing their devices and networks before the deadline.
They can do this by accessing the "Internet Options" setting in the Windows Control Panel, visiting the "Advanced" tab and deselecting the "Use TLS 1.0" and "Use TLS 1.1" options in the Security section.
Article updated two hours after publication to include similar ads made by Apple and Google. Although Mozilla has not published any article on the upcoming depreciation, a Mozilla spokesman confirmed that the company would depreciate TLS 1.0 and TLS 1.1 by 2020. The version of This article mentioned only Microsoft's plan to discourage TLS 1.0 and TLS 1.1.
RELATED COVERAGE:
Source link