Category: General|Apr 9, 2020 | Author: Admin

Browser makers cite coronavirus, restore support for obsolete TLS 1.0 and 1.1 encryption

Share on

Long-in-the-tooth Transport Layer Security (TLS) 1.0 and 1.1 encryption is getting a temporary reprieve from Google, Microsoft, and Mozilla.

Long-in-the-tooth Transport Layer Security (TLS) 1.0 and 1.1 encryption is getting a temporary reprieve from Google, Microsoft, and Mozilla.

Google, Microsoft, and Mozilla have each issued reprieves to Transport Layer Security (TLS) 1.0 and 1.1, aged encryption protocols that were to be bounced from browser support in March, because of the COVID-19 pandemic.

By common agreement, Google's Chrome, Microsoft's Internet Explorer (IE) and Edge, and Mozilla's Firefox were to disable support for TLS 1.0 and 1.1 early in 2020. They, along with Apple - which produces Safari - announced the move a year and a half ago, noting then that the protocols had been made obsolete by TLS 1.2 and 1.3.

Apple, Google, and Mozilla had committed to dropping support in March 2020, while Microsoft had only promised to purge TLS 1.0 and 1.1 sometime during the first half of this year.

But it was Microsoft that was most detailed about the TLS turnabout. "In light of current global circumstances, we will be postponing this planned change - originally scheduled for the first half of 2020," Karl Pflug, of the Edge developer experience team, wrote in a post to a company blog.

(Microsoft has generally used the "current global circumstances" phrasing or something similar, rather than coming out and saying "COVID-19" or "coronavirus.")

The plug-pulling of TLS 1.0 and 1.1 will only be delayed, Pflug continued. Edge - the newer, Chromium-based Edge, will reinstitute the banishment "no sooner" than Edge 84, currently slated to release around July 14. The older browsers in Microsoft's inventory, IE11, and the legacy Edge, will disable the protocols by default as of Sept. 8.


Google will do things differently, even though, like Edge, it's based on Chromium. Originally, Chrome 81 was to pose interstitial warning users when they tried to reach a site encrypted with TLS 1.0 and 1.1; that version was supposed to appear March 17 but was postponed three weeks ago.

"Removal of TLS 1.0 and TLS 1.1 has been delayed to Chrome 83, which is expected to ship in late May 2020," Google said in a document about Chrome feature and API deprecations. Chrome 83 - Google has already said it will skip version 82 - is scheduled to launch May 19.


Meanwhile, Mozilla chimed in, too, with more of an explanation than either of its rivals. Firefox 74, which debuted March 10, had disabled TLS 1.0 and TLS 1.1; sites that didn't support TLS version 1.2 or greater showed an error page when users tried to reach them.

Mozilla rolled that change all back. "We reverted the change for an undetermined amount of time to better enable access to critical government sites sharing COVID-19 information," Mozilla said in a revision to Firefox 74's release notes. Mozilla did not cite examples of the sites it said continued to rely on the older protocols, nor set a timetable for eventually rolling back the roll-back.

Apple has not posted any news about how its Safari will deal with TLS 1.0 and 1.1 during the coronavirus crisis.

Sponsored Ads:

Comments:


Woke up locked out of Apple ID on iPhone

Category: Apple|Apr 29, 2024 | Author: Admin

Google has a hidden collection of highly-addictive retro games

Category: Google|Apr 28, 2024 | Author: Admin

Google is officially a $2 trillion company

Category: Google|Apr 27, 2024 | Author: Admin

Snowden: “DO NOT use Reddit!”

Category: IT|Apr 26, 2024 | Author: Admin

Popular Google app used by millions set to close in a few weeks

Category: Google|Apr 25, 2024 | Author: Admin

Cheeky, YouTube!

Category: Google|Apr 24, 2024 | Author: Admin

This is the date Apple will reveal new iPads

Category: Apple|Apr 23, 2024 | Author: Admin

Only possible with VPN

Category: IT|Apr 22, 2024 | Author: Admin

Apple sidles into sideloading in the EU

Category: Apple|Apr 21, 2024 | Author: Admin

Report: Microsoft-OpenAI ownership might get conditional OK from EU regulators

Category: IT|Apr 20, 2024 | Author: Admin

Giant change at Google could change everything

Category: Google|Apr 19, 2024 | Author: Admin

Now Windows will be bothered about this too

Category: Microsoft|Apr 18, 2024 | Author: Admin

Test the new AI trick with Logitech

Category: IT|Apr 17, 2024 | Author: Admin

The US Government Has a Microsoft Problem

Category: Microsoft|Apr 16, 2024 | Author: Admin

Now comes the commercial

Category: Microsoft|Apr 15, 2024 | Author: Admin
more