Chrome and Firefox Postpone Disabling TLS 1.0 and 1.1
Martin Brinkmann (via John Opdenakker, Hacker News):
Mozilla has re-enabled TLS 1.0 and 1.1 in the Firefox Stable and Beta browser; it is unclear when Mozilla did that but an update on the Firefox release notes page highlights why the protocols have been enabled again. Mozilla notes:
We reverted the change for an undetermined amount of time to better enable access to critical government sites sharing COVID19 information.
According to the update posted on the release notes page, Mozilla made the decision because some government sites still rely on the old protocols.
And the change “will be remotely applied to Firefox 74, which has already been shipped.”
Due to adjusted work schedules at this time, we are pausing upcoming Chrome and Chrome OS releases.
See also: Deprecation of Legacy TLS 1.0 and 1.1 Versions (tweet, Hacker News).
Previously:
- TLS Increasingly Exists in Three Different Worlds
- Safari to Reject HTTPS Certificates Longer Than a Year
- Reading This Site With NetNewsWire 3
- The TLS 1.3 Controversy
