Microsoft reminded users that insecure Transport Layer Security (TLS) 1.0 and 1.1 protocols will be disabled soon in future Windows releases.
The TLS secure communication protocol is crafted to safeguard users against eavesdropping, tampering, and message forgery while exchanging and accessing information over the Internet through client/server applications.
The original TLS 1.0 specification and its TLS 1.1 successor have been used for nearly two decades, with TLS 1.0 initially introduced in 1999 and TLS 1.1 in 2006).
Following extensive discussions and the development of 28 protocol drafts, the Internet Engineering Task Force (IETF) approved in March 2018 the next major version of the TLS protocol, TLS 1.3.
“This change applies only to future new Windows operating systems, both client and server editions. Windows versions that have already been released will not be affected by this change,” Microsoft reminded customers on Friday.
“Windows 11 Insider Preview builds starting in September 2023 will have TLS versions 1.0 and 1.1 disabled by default. There is an option to re-enable TLS 1.0 or TLS 1.1 for users who need to maintain compatibility.”
The transition is expected to have minimal impact on Windows home users, with limited anticipated issues. However, enterprise admins are advised to conduct tests to identify and subsequently update or replace any affected apps.
Applications that encounter issues or fail after outdated TLS versions are disabled will be tagged using Event 36871 in the Windows Event Log.
Although the option to re-enable insecure TLS via Windows Registry will still be available, it should only be done as a last-ditch effort until incompatible apps can be updated or replaced.
It’s also important to note that Microsoft warned that support for these TLS versions may face complete removal.
Moving away from outdated traffic encryption protocols
This follows a joint statement from Microsoft, Google, Apple, and Mozilla in October 2018,…
read more www.bleepingcomputer.com
