4 ms·

A year or so back, Microsoft made an announcement of dropping TLS 1.0 and 1.1 support in Internet Explorer (and IE mode in Edge) but that seems to have gone qui

by jl6 5y ago

A year or so back, Microsoft made an announcement of dropping TLS 1.0 and 1.1 support in Internet Explorer (and IE mode in Edge) but that seems to have gone quiet, and I now wonder whether they intend to keep support going until Internet Explorer (and IE mode in Edge) itself falls out of support.

richardwhiuk 5y ago
Deferred to Spring 2021 - https://blogs.windows.com/msedgedev/2020/03/31/tls-1-0-tls-1-1-schedule-update-edge-ie11/ https://blogs.windows.com/msedgedev/2020/03/31/tls-1-0-tls-1...
- jl6 5y ago
  Which has now passed, with TLS1.0/1.1 still working.
  - nicoburns 5y ago
    From that same link: > Update as of 04/23/2021: The plan to disable TLS 1.0/1.1 by default is being updated for Internet Explorer and EdgeHTML (the rendering engine for the WebView control). TLS 1.0 and TLS 1.1 will not be disabled by default for both until early 2022. Organizations that wish to disable TLS 1.0 and TLS 1.1 before that time may do so using Group Policy. Microsoft Edge Legacy is no longer in scope for this plan as the support ended on March 9, 2021. > There are no changes to the plan for the new Microsoft Edge (based on Chromium). TLS 1.0/1.1 were disabled by default starting in Microsoft Edge version 84, and the SSLVersionMin policy that permitted enabling the legacy protocol versions will be removed in version 91. I'm guessing postponed due to not wanting to interrupt business during the pandemic where they may be short-staffed or other preoccupied.
    - Lammy 5y ago
      > TLS 1.0 and TLS 1.1 will not be disabled by default for both until early 2022. Because this is when they're killing both of those products, not just changing the default on this setting: https://blogs.windows.com/windowsexperience/2021/05/19/the-future-of-internet-explorer-on-windows-10-is-in-microsoft-edge/ https://blogs.windows.com/windowsexperience/2021/05/19/the-f...

by jl6 5y ago

richardwhiuk 5y ago

Deferred to Spring 2021 - https://blogs.windows.com/msedgedev/2020/03/31/tls-1-0-tls-1-1-schedule-update-edge-ie11/ https://blogs.windows.com/msedgedev/2020/03/31/tls-1-0-tls-1...

jl6 5y ago
Which has now passed, with TLS1.0/1.1 still working.
- nicoburns 5y ago
  From that same link: > Update as of 04/23/2021: The plan to disable TLS 1.0/1.1 by default is being updated for Internet Explorer and EdgeHTML (the rendering engine for the WebView control). TLS 1.0 and TLS 1.1 will not be disabled by default for both until early 2022. Organizations that wish to disable TLS 1.0 and TLS 1.1 before that time may do so using Group Policy. Microsoft Edge Legacy is no longer in scope for this plan as the support ended on March 9, 2021. > There are no changes to the plan for the new Microsoft Edge (based on Chromium). TLS 1.0/1.1 were disabled by default starting in Microsoft Edge version 84, and the SSLVersionMin policy that permitted enabling the legacy protocol versions will be removed in version 91. I'm guessing postponed due to not wanting to interrupt business during the pandemic where they may be short-staffed or other preoccupied.
  - Lammy 5y ago
    > TLS 1.0 and TLS 1.1 will not be disabled by default for both until early 2022. Because this is when they're killing both of those products, not just changing the default on this setting: https://blogs.windows.com/windowsexperience/2021/05/19/the-future-of-internet-explorer-on-windows-10-is-in-microsoft-edge/ https://blogs.windows.com/windowsexperience/2021/05/19/the-f...