Category: General|Apr 9, 2020 | Author: Admin

Browser makers cite coronavirus, restore support for obsolete TLS 1.0 and 1.1 encryption

Share on

Long-in-the-tooth Transport Layer Security (TLS) 1.0 and 1.1 encryption is getting a temporary reprieve from Google, Microsoft, and Mozilla.

Long-in-the-tooth Transport Layer Security (TLS) 1.0 and 1.1 encryption is getting a temporary reprieve from Google, Microsoft, and Mozilla.

Google, Microsoft, and Mozilla have each issued reprieves to Transport Layer Security (TLS) 1.0 and 1.1, aged encryption protocols that were to be bounced from browser support in March, because of the COVID-19 pandemic.

By common agreement, Google's Chrome, Microsoft's Internet Explorer (IE) and Edge, and Mozilla's Firefox were to disable support for TLS 1.0 and 1.1 early in 2020. They, along with Apple - which produces Safari - announced the move a year and a half ago, noting then that the protocols had been made obsolete by TLS 1.2 and 1.3.

Apple, Google, and Mozilla had committed to dropping support in March 2020, while Microsoft had only promised to purge TLS 1.0 and 1.1 sometime during the first half of this year.

But it was Microsoft that was most detailed about the TLS turnabout. "In light of current global circumstances, we will be postponing this planned change - originally scheduled for the first half of 2020," Karl Pflug, of the Edge developer experience team, wrote in a post to a company blog.

(Microsoft has generally used the "current global circumstances" phrasing or something similar, rather than coming out and saying "COVID-19" or "coronavirus.")

The plug-pulling of TLS 1.0 and 1.1 will only be delayed, Pflug continued. Edge - the newer, Chromium-based Edge, will reinstitute the banishment "no sooner" than Edge 84, currently slated to release around July 14. The older browsers in Microsoft's inventory, IE11, and the legacy Edge, will disable the protocols by default as of Sept. 8.


Google will do things differently, even though, like Edge, it's based on Chromium. Originally, Chrome 81 was to pose interstitial warning users when they tried to reach a site encrypted with TLS 1.0 and 1.1; that version was supposed to appear March 17 but was postponed three weeks ago.

"Removal of TLS 1.0 and TLS 1.1 has been delayed to Chrome 83, which is expected to ship in late May 2020," Google said in a document about Chrome feature and API deprecations. Chrome 83 - Google has already said it will skip version 82 - is scheduled to launch May 19.


Meanwhile, Mozilla chimed in, too, with more of an explanation than either of its rivals. Firefox 74, which debuted March 10, had disabled TLS 1.0 and TLS 1.1; sites that didn't support TLS version 1.2 or greater showed an error page when users tried to reach them.

Mozilla rolled that change all back. "We reverted the change for an undetermined amount of time to better enable access to critical government sites sharing COVID-19 information," Mozilla said in a revision to Firefox 74's release notes. Mozilla did not cite examples of the sites it said continued to rely on the older protocols, nor set a timetable for eventually rolling back the roll-back.

Apple has not posted any news about how its Safari will deal with TLS 1.0 and 1.1 during the coronavirus crisis.

Sponsored Ads:

Comments:


I think Apple has given up

Category: Apple|Nov 30, 2023 | Author: Admin

There are not a few who have been annoyed by the shortage

Category: Apple|Nov 29, 2023 | Author: Admin

THE NIGHTMARE: The files since May are gone

Category: Google|Nov 28, 2023 | Author: Admin

No, you're not wrong

Category: IT|Nov 27, 2023 | Author: Admin

Most Apple employees join Google after resigning, shows LinkedIn data

Category: Apple|Nov 26, 2023 | Author: Admin

Warning: 3 Critical Vulnerabilities Expose ownCloud Users to Data Breaches

Category: IT|Nov 25, 2023 | Author: Admin

The trade cost them NOK 657 billion

Category: IT|Nov 24, 2023 | Author: Admin

Is this the cause of the OpenAI chaos? “A danger to humanity”

Category: IT|Nov 23, 2023 | Author: Admin

Sam Altman BACK

Category: IT|Nov 22, 2023 | Author: Admin

It's much worse than we thought

Category: IT|Nov 21, 2023 | Author: Admin

February: 3000 nits, 24GB RAM, Snapdragon 8 Gen 3

Category: General|Nov 20, 2023 | Author: Admin

UPDATED: Removed, and the reason is shocking

Category: General|Nov 19, 2023 | Author: Admin

"Apple is struggling more than expected"

Category: Apple|Nov 18, 2023 | Author: Admin

Old Manifest V2 Chrome extensions will be disabled in 2024

Category: Google|Nov 17, 2023 | Author: Admin

Now Windows is an app for iPhone

Category: Microsoft|Nov 16, 2023 | Author: Admin
more