SSQL about banner

TLS Explained​

TLS Explained​

What is TLS​

Transport Layer Security (TLS) is a protocol method that handles the end-to-end encryption of data sent over the Internet.

TLS evolved from Secure Socket Layers (SSL) which was originally developed by Netscape Communications Corporation in 1994 to secure web sessions. SSL 1.0 was never publicly released, whilst SSL 2.0 was quickly replaced by SSL 3.0 on which TLS is based.

TLS is normally implemented on top of TCP in order to encrypt Application Layer protocols such as HTTP, FTP, SMTP and IMAP.

SSL Quality Check TLS

Out of Date Protocols​

Various Browser clients have provided approximate deadlines for disabling TLS 1.0 and TLS 1.1 protocol:

The most common failing with insecure websites is that they run the two old Protocols TLS 1.0 and TLS 1.1

Various Browser clients have provided approximate deadlines for disabling TLS 1.0 and TLS 1.1 protocol:

Browser NameDate
Microsoft IE and EdgeFirst half of 2020
Mozilla FirefoxMarch 2020
Safari/WebkitMarch 2020
Google ChromeJanuary 2020

Best practices outlined in RFC-7525 give reasons why it is discouraged to use protocol TLS 1.0 and TLS 1.1. PCI-DSS recommends users to switch from protocol TLS 1.0 and adopt protocol TLS 1.2+.

To comply with best practice and still be able to work with the majority of current devices you should be running TLS 1.2 (for older devices) and TLS 1.3 (for current devices).

Some customers worry, understandably about backwards compatibility. However the number of visits from browser devices running only TLS 1.0 and TLS 1.1 is now generally under 1.2% on many websites. Importantly the Javascript functionality on these older devices makes them inoperable with most current websites. These use technologies like AJAX and JQuery especially on menus, baskets and checkouts.

In our experience, when we are asked for data assessments on supporting old browsers like for example Windows 7 and Internet Explorer 10 we find that visits are extremely low and that few if ever convert to a sale.

References

 

SSL Quality Check TLS deadline