All major browsers drop TLS 1.0 and 1.1 in 2020

[harlan4096]

All major web browser makers announced on October 15, 2018 that the browsers that they produce will stop supporting the standards TLS 1.0 and TLS 1.1 in 2020.

The change was announced by Google, Apple, Microsoft, and Mozilla on company websites.

Transport Layer Security (TLS) is a security protocol used on the Internet to protect Internet traffic. It uses encryption to protect the data from eavesdropping.

TLS 1.0 and TLS 1.1 are old standards. TLS 1.0 turned 19 this year, a very long time on the Internet. The main issue with TLS 1.0 is not that the protocol has known security issues but that it doesn't support modern cryptographic algorithms.

TLS 1.1 on the other hand is used by only 0.1% of all connections and while it addresses some limitations of TLS 1.0, newer standards such as TLS 1.2 or TLS 1.3 are better suited going forward. It is also relatively old as it turned 10 recently.

The use of more modern protocol versions improves performance and security of connections by introducing features such as perfect forward secrecy and resistance to downgrade-related attacks. TLS 1.2 is also the requirement for HTTP/2 which offers performance improvements when used.

Full reading: https://www.ghacks.net/2018/10/16/all-ma...1-in-2020/