Movatterモバイル変換

Version history for TLS/SSL support in web browsers

From Wikipedia, the free encyclopedia

History of web browser protocol support

Version history for TLS/SSL support in web browsers tracks the implementation ofTransport Layer Security protocol versions in majorweb browsers.

TLS/SSL support history of web browsers
Browser or OS API	Version		Platforms	SSL protocols		TLS protocols				Certificate support			Vulnerability^{[n 1]}						Protocol selection by user^{[n 2]}
Browser or OS API	Version		Platforms	SSL 2.0 (insecure)	SSL 3.0 (insecure)	TLS 1.0 (deprecated)	TLS 1.1 (deprecated)	TLS 1.2	TLS 1.3	EV^{[n 3]}^[1]	SHA-2^[2]	ECDSA^[3]	BEAST^{[n 4]}	CRIME^{[n 5]}	POODLE (SSLv3)^{[n 6]}	RC4^{[n 7]}	FREAK^[4]^[5]	Logjam	Protocol selection by user^{[n 2]}
Google Chrome (Chrome for Android)^{[n 8]}^{[n 9]}	1–9		Windows (10+) macOS (12+) Linux Android (10+) iOS (17+) ChromeOS	Disabled by default	Yes	Yes	No	No	No	Yes (only desktop)	Requires SHA-2 compatible OS^[2]	NeedsECC compatible OS^[3]	Not affected^[10]	Vulnerable (HTTPS)	Vulnerable	Vulnerable	Vulnerable (except Windows)	Vulnerable	Yes^{[n 10]}
	10–20			No^[11]	Yes	Yes	No	No	No	Yes (only desktop)	Requires SHA-2 compatible OS^[2]	Needs ECC compatible OS^[3]	Not affected	Vulnerable (HTTPS/SPDY)	Vulnerable	Vulnerable	Vulnerable (except Windows)	Vulnerable	Yes^{[n 10]}
	21			No	Yes	Yes	No	No	No	Yes (only desktop)	Requires SHA-2 compatible OS^[2]	Needs ECC compatible OS^[3]	Not affected	Mitigated^[12]	Vulnerable	Vulnerable	Vulnerable (except Windows)	Vulnerable	Yes^{[n 10]}
	22–29			No	Yes	Yes	Yes^[13]	No^[13]^[14]^[15]^[16]	No	Yes (only desktop)	Requires SHA-2 compatible OS^[2]	Needs ECC compatible OS^[3]	Not affected	Mitigated	Vulnerable	Vulnerable	Vulnerable (except Windows)	Vulnerable	Temporary^{[n 11]}
	30–32			No	Yes	Yes	Yes	Yes^[14]^[15]^[16]	No	Yes (only desktop)	Requires SHA-2 compatible OS^[2]	Needs ECC compatible OS^[3]	Not affected	Mitigated	Vulnerable	Vulnerable	Vulnerable (except Windows)	Vulnerable	Temporary^{[n 11]}
	33–37			No	Yes	Yes	Yes	Yes	No	Yes (only desktop)	Requires SHA-2 compatible OS^[2]	Needs ECC compatible OS^[3]	Not affected	Mitigated	Partly mitigated^{[n 12]}	Lowest priority^[19]^[20]^[21]	Vulnerable (except Windows)	Vulnerable	Temporary^{[n 11]}
	38, 39			No	Yes	Yes	Yes	Yes	No	Yes (only desktop)	Yes	Needs ECC compatible OS^[3]	Not affected	Mitigated	Partly mitigated	Lowest priority	Vulnerable (except Windows)	Vulnerable	Temporary^{[n 11]}
	40			No	Disabled by default^[18]^[22]	Yes	Yes	Yes	No	Yes (only desktop)	Yes	Needs ECC compatible OS^[3]	Not affected	Mitigated	Mitigated^{[n 13]}	Lowest priority	Vulnerable (except Windows)	Vulnerable	Yes^{[n 14]}
	41, 42			No	Disabled by default	Yes	Yes	Yes	No	Yes (only desktop)	Yes	Needs ECC compatible OS^[3]	Not affected	Mitigated	Mitigated	Lowest priority	Mitigated	Vulnerable	Yes^{[n 14]}
	43			No	Disabled by default	Yes	Yes	Yes	No	Yes (only desktop)	Yes	Needs ECC compatible OS^[3]	Not affected	Mitigated	Mitigated	Only as fallback^{[n 15]}^[23]	Mitigated	Vulnerable	Yes^{[n 14]}
	44–47			No	No^[24]	Yes	Yes	Yes	No	Yes (only desktop)	Yes	Needs ECC compatible OS^[3]	Not affected	Mitigated	Not affected	Only as fallback^{[n 15]}	Mitigated	Mitigated^[25]	Temporary^{[n 11]}
	48, 49			No	No	Yes	Yes	Yes	No	Yes (only desktop)	Yes	Needs ECC compatible OS^[3]	Not affected	Mitigated	Not affected	Disabled by default^{[n 16]}^[26]^[27]	Mitigated	Mitigated	Temporary^{[n 11]}
	50–53			No	No	Yes	Yes	Yes	No	Yes (only desktop)	Yes	Yes	Not affected	Mitigated	Not affected	Disabled by default^{[n 16]}^[26]^[27]	Mitigated	Mitigated	Temporary^{[n 11]}
	54–66			No	No	Yes	Yes	Yes	Disabled by default (draft version)	Yes (only desktop)	Yes	Yes	Not affected	Mitigated	Not affected	Disabled by default^{[n 16]}^[26]^[27]	Mitigated	Mitigated	Temporary^{[n 11]}
	67–69			No	No	Yes	Yes	Yes	Yes (draft version)	Yes (only desktop)	Yes	Yes	Not affected	Mitigated	Not affected	Disabled by default^{[n 16]}^[26]^[27]	Mitigated	Mitigated	Temporary^{[n 11]}
	70–83			No	No	Yes	Yes	Yes	Yes	Yes (only desktop)	Yes	Yes	Not affected	Mitigated	Not affected	Disabled by default^{[n 16]}^[26]^[27]	Mitigated	Mitigated	Temporary^{[n 11]}
	84–90			No	No	Warn by default	Warn by default	Yes	Yes	Yes (only desktop)	Yes	Yes	Not affected	Mitigated	Not affected	Disabled by default^{[n 16]}^[26]^[27]	Mitigated	Mitigated	Temporary^{[n 11]}
	91–143			No	No	No^[28]	No^[28]	Yes	Yes	Yes (only desktop)	Yes	Yes	Not affected	Mitigated	Not affected	Disabled by default^{[n 16]}^[26]^[27]	Mitigated	Mitigated	Temporary^{[n 11]}
	ESC 144	145		No	No	No^[28]	No^[28]	Yes	Yes	Yes (only desktop)	Yes	Yes	Not affected	Mitigated	Not affected	Disabled by default^{[n 16]}^[26]^[27]	Mitigated	Mitigated	Temporary^{[n 11]}
Browser or OS API	Version		Platforms	SSL 2.0 (insecure)	SSL 3.0 (insecure)	TLS 1.0 (deprecated)	TLS 1.1 (deprecated)	TLS 1.2	TLS 1.3	EV certificate	SHA-2 certificate	ECDSA certificate	BEAST	CRIME	POODLE (SSLv3)	RC4	FREAK	Logjam	Protocol selection by user
Microsoft Edge (Chromium-based) OS-independent	79–83		Windows (10+) macOS (12+) Linux Android (10+) iOS (18+)	No	No	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Mitigated	Not affected	Not affected	Disabled by default	Mitigated	Mitigated	Yes^{[n 10]}
	84–90			No	No	Warn by default	Warn by default	Yes	Yes	Yes	Yes	Yes	Mitigated	Not affected	Not affected	Disabled by default	Mitigated	Mitigated	Yes^{[n 10]}
	91-143			No	No	No^[29]	No^[29]	Yes	Yes	Yes	Yes	Yes	Mitigated	Not affected	Not affected	Disabled by default	Mitigated	Mitigated	Yes^{[n 10]}
	ESC 144	145		No	No	No^[29]	No^[29]	Yes	Yes	Yes	Yes	Yes	Mitigated	Not affected	Not affected	Disabled by default	Mitigated	Mitigated	Yes^{[n 10]}
Browser or OS API	Version		Platforms	SSL 2.0 (insecure)	SSL 3.0 (insecure)	TLS 1.0 (deprecated)	TLS 1.1 (deprecated)	TLS 1.2	TLS 1.3	EV certificate	SHA-2 certificate	ECDSA certificate	BEAST	CRIME	POODLE (SSLv3)	RC4	FREAK	Logjam	Protocol selection by user
Mozilla Firefox (Firefox for mobile)^{[n 17]}	1.0, 1.5		Windows (10+) macOS (10.15+) Linux Android (8.0+) iOS(15+) ~~Firefox OS~~ ~~Maemo~~ ESR 115 only for: Windows (7–8.1) macOS (10.12–10.14) ESR 140+ only for: Windows (10+) macOS (10.15+) Linux	Yes^[30]	Yes^[30]	Yes^[30]	No	No	No	No	Yes^[2]	No	Not affected^[31]	Not affected	Vulnerable	Vulnerable	Not affected	Vulnerable	Yes^{[n 10]}
	2			Disabled by default^[30]^[32]	Yes	Yes	No	No	No	No	Yes	Yes^[3]	Not affected	Not affected	Vulnerable	Vulnerable	Not affected	Vulnerable	Yes^{[n 10]}
	3–7			Disabled by default	Yes	Yes	No	No	No	Yes	Yes	Yes	Not affected	Not affected	Vulnerable	Vulnerable	Not affected	Vulnerable	Yes^{[n 10]}
	8–10 ESR 10			No^[32]	Yes	Yes	No	No	No	Yes	Yes	Yes	Not affected	Not affected	Vulnerable	Vulnerable	Not affected	Vulnerable	Yes^{[n 10]}
	11–14			No	Yes	Yes	No	No	No	Yes	Yes	Yes	Not affected	Vulnerable (SPDY)^[12]	Vulnerable	Vulnerable	Not affected	Vulnerable	Yes^{[n 10]}
	15–22 ESR 17.0–17.0.10			No	Yes	Yes	No	No	No	Yes	Yes	Yes	Not affected	Mitigated	Vulnerable	Vulnerable	Not affected	Vulnerable	Yes^{[n 10]}
	ESR 17.0.11			No	Yes	Yes	No	No	No	Yes	Yes	Yes	Not affected	Mitigated	Vulnerable	Lowest priority^[33]^[34]	Not affected	Vulnerable	Yes^{[n 10]}
	23			No	Yes	Yes	Disabled by default^[35]	No	No	Yes	Yes	Yes	Not affected	Mitigated	Vulnerable	Vulnerable	Not affected	Vulnerable	Yes^{[n 18]}
	24, 25.0.0 ESR 24.0–24.1.0			No	Yes	Yes	Disabled by default	Disabled by default^[36]	No	Yes	Yes	Yes	Not affected	Mitigated	Vulnerable	Vulnerable	Not affected	Vulnerable	Yes^{[n 18]}
	25.0.1, 26 ESR 24.1.1–24.8.1			No	Yes	Yes	Disabled by default	Disabled by default	No	Yes	Yes	Yes	Not affected	Mitigated	Vulnerable	Lowest priority^[33]^[34]	Not affected	Vulnerable	Yes^{[n 18]}
	27–33 ESR 31.0–31.2.0			No	Yes	Yes	Yes^[37]^[38]	Yes^[39]^[38]	No	Yes	Yes	Yes	Not affected	Mitigated	Vulnerable	Lowest priority	Not affected	Vulnerable	Yes^{[n 18]}
	34, 35 ESR 31.3.0–31.7.0			No	Disabled by default^[40]^[41]	Yes	Yes	Yes	No	Yes	Yes	Yes	Not affected	Mitigated	Mitigated^{[n 19]}	Lowest priority	Not affected	Vulnerable	Yes^{[n 18]}
	ESR 31.8.0			No	Disabled by default	Yes	Yes	Yes	No	Yes	Yes	Yes	Not affected	Mitigated	Mitigated	Lowest priority	Not affected	Mitigated^[44]	Yes^{[n 18]}
	36–38 ESR 38.0–38.0.1			No	Disabled by default	Yes	Yes	Yes	No	Yes	Yes	Yes	Not affected	Mitigated	Mitigated	Only as fallback^{[n 15]}^[45]	Not affected	Vulnerable	Yes^{[n 18]}
	ESR 38.1.0–38.8.0			No	Disabled by default	Yes	Yes	Yes	No	Yes	Yes	Yes	Not affected	Mitigated	Mitigated	Only as fallback^{[n 15]}	Not affected	Mitigated^[44]	Yes^{[n 18]}
	39–43			No	No^[46]	Yes	Yes	Yes	No	Yes	Yes	Yes	Not affected	Mitigated	Not affected	Only as fallback^{[n 15]}	Not affected	Mitigated^[44]	Yes^{[n 18]}
	44–48 ESR 45			No	No	Yes	Yes	Yes	No	Yes	Yes	Yes	Not affected	Mitigated	Not affected	Disabled by default^{[n 16]}^[47]^[48]^[49]^[50]	Not affected	Mitigated	Yes^{[n 18]}
	49–59 ESR 52			No	No	Yes	Yes	Yes	Disabled by default (draft version)^[51]	Yes	Yes	Yes	Not affected	Mitigated	Not affected	Disabled by default^{[n 16]}	Not affected	Mitigated	Yes^{[n 18]}
	60–62 ESR 60			No	No	Yes	Yes	Yes	Yes (draft version)	Yes	Yes	Yes	Not affected	Mitigated	Not affected	Disabled by default^{[n 16]}	Not affected	Mitigated	Yes^{[n 18]}
	63–77 ESR 68			No	No	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Not affected	Mitigated	Not affected	Disabled by default^{[n 16]}	Not affected	Mitigated	Yes^{[n 18]}
	78–146 ESR 78–115.31 ESR 128-140.6			No	No	Disabled by default^[52]	Disabled by default^[52]	Yes	Yes	Yes	Yes	Yes	Not affected	Mitigated	Not affected	Disabled by default^{[n 16]}	Not affected	Mitigated	Yes^{[n 18]}
	ESR 115.32
	ESR 140.7
	147
Browser or OS API	Version		Platforms	SSL 2.0 (insecure)	SSL 3.0 (insecure)	TLS 1.0 (deprecated)	TLS 1.1 (deprecated)	TLS 1.2	TLS 1.3	EV certificate	SHA-2 certificate	ECDSA certificate	BEAST	CRIME	POODLE (SSLv3)	RC4	FREAK	Logjam	Protocol selection by user
Microsoft Internet Explorer (1–10)^{[n 20]} Windows Schannel	1.x		Windows3.1,95,NT,^{[n 21]}^{[n 22]} Mac OS7,8	No SSL/TLS support
	2			Yes	No	No	No	No	No	No	No	No	No SSL 3.0 or TLS support			Vulnerable	Vulnerable	Vulnerable	N/a
	3			Yes	Yes^[55]	No	No	No	No	No	No	No	Vulnerable	Not affected	Vulnerable	Vulnerable	Vulnerable	Vulnerable	?
	4,5,6		Windows3.1,95,98,NT,2000^{[n 21]}^{[n 22]} Mac OS7.1,8,X, Solaris,HP-UX	Yes	Yes	Disabled by default^[55]	No	No	No	No	No	No	Vulnerable	Not affected	Vulnerable	Vulnerable	Vulnerable	Vulnerable	Yes^{[n 10]}
	6		Windows XP^{[n 22]}	Yes	Yes	Disabled by default	No	No	No	No	Yes (Since SP3)^{[n 23]}^[56]	No	Mitigated	Not affected	Vulnerable	Vulnerable	Vulnerable	Vulnerable	Yes^{[n 10]}
	7,8		Windows XP^{[n 22]}	Disabled by default^[57]	Yes	Yes^[57]	No	No	No	Yes	Yes (Since SP3)^{[n 23]}^[56]	No	Mitigated	Not affected	Vulnerable	Vulnerable	Vulnerable	Vulnerable	Yes^{[n 10]}
	6		Server 2003^{[n 22]}	Yes	Yes	Disabled by default	No	No	No	No	Yes (KB938397+KB968730)^{[n 23]}^[56]	No	Mitigated	Not affected	Vulnerable	Vulnerable	Mitigated^[60]	Mitigated^[61]	Yes^{[n 10]}
	7,8		Server 2003^{[n 22]}	Disabled by default^[57]	Yes	Yes^[57]	No	No	No	Yes	Yes (KB938397+KB968730)^{[n 23]}^[56]	No	Mitigated	Not affected	Vulnerable	Vulnerable	Mitigated^[60]	Mitigated^[61]	Yes^{[n 10]}
	7,8,9		Windows Vista	Disabled by default	Yes	Yes	No	No	No	Yes	Yes	Yes^[3]	Mitigated	Not affected	Vulnerable	Vulnerable	Mitigated^[60]	Mitigated^[61]	Yes^{[n 10]}
	7,8,9		Server 2008	Disabled by default	Yes	Yes	Disabled by default^[62] (KB4019276)^{[n 24]}	Disabled by default^[62] (KB4019276)^{[n 24]}	No	Yes	Yes	Yes^[3]	Mitigated	Not affected	Vulnerable	Vulnerable	Mitigated^[60]	Mitigated^[61]	Yes^{[n 10]}
	8,9,10		7,8 Server 2008 R2 Server 2012	Disabled by default	Yes	Yes	Disabled by default^{[n 24]}^[64]	Disabled by default^{[n 24]}^[64]	No	Yes	Yes	Yes	Mitigated	Not affected	Vulnerable	Lowest priority^[65]^{[n 25]}	Mitigated^[60]	Mitigated^[61]	Yes^{[n 10]}
Internet Explorer 11^{[n 20]} Windows Schannel	11^{[n 26]}^[67]		7,8.1 Server 2008 R2 Server 2012^[67] Server 2012 R2	Disabled by default	Disabled by default^{[n 27]}	Disabled by default^{[n 28]}	Disabled by default^{[n 24]}^{[n 28]}	Yes^{[n 24]}^[73]	No	Yes	Yes	Yes	Mitigated	Not affected	Mitigated^{[n 27]}	Disabled by default^{[n 16]}	Mitigated^[60]	Mitigated^[61]	Yes^{[n 10]}
Browser or OS API	Version		Platforms	SSL 2.0 (insecure)	SSL 3.0 (insecure)	TLS 1.0 (deprecated)	TLS 1.1 (deprecated)	TLS 1.2	TLS 1.3	EV certificate	SHA-2 certificate	ECDSA certificate	BEAST	CRIME	POODLE (SSLv3)	RC4	FREAK	Logjam	Protocol selection by user
Microsoft Edge (12–18) (EdgeHTML-based) Client only Internet Explorer 11^{[n 20]} Windows Schannel	11	12–13	Windows 101507–1511	Disabled by default	Yes^[63]	Yes	Yes	Yes^{[n 24]}	No	Yes	Yes	Yes	Mitigated	Not affected	Mitigated	Disabled by default^{[n 16]}	Mitigated	Mitigated	Yes^{[n 10]}
	11	14–18 (client only)	Windows 101607–2004 Windows Server (SAC) 1709–2004	No^[74]	Disabled by default	Yes	Yes	Yes	No	Yes	Yes	Yes	Mitigated	Not affected	Mitigated	Disabled by default^{[n 16]}	Mitigated	Mitigated	Yes^{[n 10]}
Internet Explorer 11^{[n 20]} Windows Schannel	11^{[n 29]}		Windows 1020H2–22H2 Windows Server (SAC) 20H2	No	Disabled by default	Disabled by default^{[n 28]}	Disabled by default^{[n 28]}	Yes	No	Yes	Yes	Yes	Mitigated	Not affected	Mitigated	Disabled by default^{[n 16]}	Mitigated	Mitigated	Yes^{[n 10]}
Windows Schannel	Windows 1121H2–22H2 (Ent/Edu/Home/Pro)			No	Disabled by default	Disabled by default^{[n 28]}	Disabled by default^{[n 28]}	Yes	Yes^[63]	Yes	Yes	Yes	Mitigated	Not affected	Mitigated	Disabled by default^{[n 16]}	Mitigated	Mitigated	Yes^{[n 10]}
	Windows 1123H2 (Home/Pro)			No	Disabled by default	Disabled by default^{[n 28]}	Disabled by default^{[n 28]}	Yes	Yes	Yes	Yes	Yes	Mitigated	Not affected	Mitigated	Disabled by default^{[n 16]}	Mitigated	Mitigated	Yes^{[n 10]}
	Windows 1123H2 (Ent/Edu)			No	Disabled by default	Disabled by default^{[n 28]}	Disabled by default^{[n 28]}	Yes	Yes	Yes	Yes	Yes	Mitigated	Not affected	Mitigated	Disabled by default^{[n 16]}	Mitigated	Mitigated	Yes^{[n 10]}
	Windows 1124H2 (Home/Pro)			No	Disabled by default	Disabled by default^{[n 28]}	Disabled by default^{[n 28]}	Yes	Yes	Yes	Yes	Yes	Mitigated	Not affected	Mitigated	Disabled by default^{[n 16]}	Mitigated	Mitigated	Yes^{[n 10]}
	Windows 1124H2 (Ent/Edu)			No	Disabled by default	Disabled by default^{[n 28]}	Disabled by default^{[n 28]}	Yes	Yes	Yes	Yes	Yes	Mitigated	Not affected	Mitigated	Disabled by default^{[n 16]}	Mitigated	Mitigated	Yes^{[n 10]}
	Windows 1125H2 (Ent/Edu/Home/Pro)			No	Disabled by default	Disabled by default^{[n 28]}	Disabled by default^{[n 28]}	Yes	Yes	Yes	Yes	Yes	Mitigated	Not affected	Mitigated	Disabled by default^{[n 16]}	Mitigated	Mitigated	Yes^{[n 10]}
	Windows 1126H1 (Specific ARM SoCs only)^[77]			No	Disabled by default	Disabled by default^{[n 28]}	Disabled by default^{[n 28]}	Yes	Yes	Yes	Yes	Yes	Mitigated	Not affected	Mitigated	Disabled by default^{[n 16]}	Mitigated	Mitigated	Yes^{[n 10]}
	Windows 1126H2			No	Disabled by default	Disabled by default^{[n 28]}	Disabled by default^{[n 28]}	Yes	Yes	Yes	Yes	Yes	Mitigated	Not affected	Mitigated	Disabled by default^{[n 16]}	Mitigated	Mitigated	Yes^{[n 10]}
Internet Explorer 11^{[n 20]} LTSB/LTSC Windows Schannel LTSB/LTSC	11		Windows 10 LTSB 2015 (1507)	Disabled by default	Yes^[63]	Disabled by default^{[n 28]}	Disabled by default^{[n 28]}	Yes^{[n 24]}	No	Yes	Yes	Yes	Mitigated	Not affected	Mitigated	Disabled by default^{[n 16]}	Mitigated	Mitigated	Yes^{[n 10]}
			Windows 10 LTSB 2016 (1607)	No^[74]	Disabled by default	Disabled by default^{[n 28]}	Disabled by default^{[n 28]}	Yes	No	Yes	Yes	Yes	Mitigated	Not affected	Mitigated	Disabled by default^{[n 16]}	Mitigated	Mitigated	Yes^{[n 10]}
			Windows Server 2016 (LTSB/1607)	No^[74]	Disabled by default	Disabled by default^{[n 28]}	Disabled by default^{[n 28]}	Yes	No	Yes	Yes	Yes	Mitigated	Not affected	Mitigated	Disabled by default^{[n 16]}	Mitigated	Mitigated	Yes^{[n 10]}
			Windows 10 LTSC 2019 (1809) Windows Server 2019 (LTSC/1809)	No	Disabled by default	Disabled by default^{[n 28]}	Disabled by default^{[n 28]}	Yes	No	Yes	Yes	Yes	Mitigated	Not affected	Mitigated	Disabled by default^{[n 16]}	Mitigated	Mitigated	Yes^{[n 10]}
			Windows 10 LTSC 2021 (21H2)	No	Disabled by default	Disabled by default^{[n 28]}	Disabled by default^{[n 28]}	Yes	No^[63]	Yes	Yes	Yes	Mitigated	Not affected	Mitigated	Disabled by default^{[n 16]}	Mitigated	Mitigated	Yes^{[n 10]}
			Windows Server 2022 (LTSC/21H2)	No	Disabled by default	Disabled by default^{[n 28]}	Disabled by default^{[n 28]}	Yes	Yes	Yes	Yes	Yes	Mitigated	Not affected	Mitigated	Disabled by default^{[n 16]}	Mitigated	Mitigated	Yes^{[n 10]}
Windows Schannel LTSC	Windows 11 LTSC 2024 (24H2)			No	Disabled by default	Disabled by default^{[n 28]}	Disabled by default^{[n 28]}	Yes	Yes	Yes	Yes	Yes	Mitigated	Not affected	Mitigated	Disabled by default^{[n 16]}	Mitigated	Mitigated	Yes^{[n 10]}
Windows Schannel LTSC	Windows Server 2025 (LTSC/24H2)			No	Disabled by default	Disabled by default^{[n 28]}	Disabled by default^{[n 28]}	Yes	Yes	Yes	Yes	Yes	Mitigated	Not affected	Mitigated	Disabled by default^{[n 16]}	Mitigated	Mitigated	Yes^{[n 10]}
Browser or OS API	Version		Platforms	SSL 2.0 (insecure)	SSL 3.0 (insecure)	TLS 1.0 (deprecated)	TLS 1.1 (deprecated)	TLS 1.2	TLS 1.3	EV certificate	SHA-2 certificate	ECDSA certificate	BEAST	CRIME	POODLE (SSLv3)	RC4	FREAK	Logjam	Protocol selection by user
MicrosoftInternet Explorer Mobile^{[n 20]}	7–9		Windows Phone 7, 7.5, 7.8	Disabled by default^[57]	Yes	Yes	No^{[citation needed]}	No^{[citation needed]}	No	No^{[citation needed]}	Yes	Yes^[78]	?	Not affected	Vulnerable	Vulnerable	Vulnerable	Vulnerable	Only with 3rd party tools^{[n 30]}
	10		Windows Phone 8	Disabled by default	Yes	Yes	Disabled by default^[80]	Disabled by default^[80]	No	No^{[citation needed]}	Yes	Yes^[81]	Mitigated	Not affected	Vulnerable	Vulnerable	Vulnerable	Vulnerable	Only with 3rd party tools^{[n 30]}
	11		Windows Phone 8.1	Disabled by default	Yes	Yes	Yes^[82]	Yes^[82]	No	No^{[citation needed]}	Yes	Yes	Mitigated	Not affected	Vulnerable	Only as fallback^{[n 15]}^[83]^[84]	Vulnerable	Vulnerable	Only with 3rd party tools^{[n 30]}
Microsoft Edge (13–15) (EdgeHTML-based)^{[n 31]}	13		Windows 10 Mobile 1511	Disabled by default	Disabled by default	Yes	Yes	Yes	No	Yes	Yes	Yes	Mitigated	Not affected	Mitigated	Disabled by default^{[n 16]}	Mitigated	Mitigated	No
Microsoft Edge (13–15) (EdgeHTML-based)^{[n 31]}	14, 15		Windows 10 Mobile 1607–1709	No^[74]	Disabled by default	Yes	Yes	Yes	No	Yes	Yes	Yes	Mitigated	Not affected	Mitigated	Disabled by default^{[n 16]}	Mitigated	Mitigated	No
Browser or OS API	Version		Platforms	SSL 2.0 (insecure)	SSL 3.0 (insecure)	TLS 1.0 (deprecated)	TLS 1.1 (deprecated)	TLS 1.2	TLS 1.3	EV certificate	SHA-2 certificate	ECDSA certificate	BEAST	CRIME	POODLE (SSLv3)	RC4	FREAK	Logjam	Protocol selection by user
Apple Safari^{[n 32]}	1		Mac OS X10.2,10.3	No^[89]	Yes	Yes	No	No	No	No	No	No	Vulnerable	Not affected	Vulnerable	Vulnerable	Vulnerable	Vulnerable	No
	2–5		Mac OS X10.4,10.5,Win XP	No	Yes	Yes	No	No	No	Yes (Since v3.2)	No	No	Vulnerable	Not affected	Vulnerable	Vulnerable	Vulnerable	Vulnerable	No
	3–5		Vista,Win 7	No	Yes	Yes	No	No	No	Yes (Since v3.2)	No	Yes^[78]	Vulnerable	Not affected	Vulnerable	Vulnerable	Vulnerable	Vulnerable	No
	4–6		Mac OS X10.6,10.7	No	Yes	Yes	No	No	No	Yes	Yes^[2]	Yes^[3]	Vulnerable	Not affected	Vulnerable	Vulnerable	Vulnerable	Vulnerable	No
	6		OS X 10.8	No	Yes	Yes	No	No	No	Yes	Yes	Yes^[3]	Mitigated^{[n 33]}	Not affected	Mitigated^{[n 34]}	Vulnerable^{[n 34]}	Mitigated^[95]	Vulnerable	No
	7, 9		OS X 10.9	No	Yes	Yes	Yes^[96]	Yes^[96]	No	Yes	Yes	Yes	Mitigated^[91]	Not affected	Mitigated^{[n 34]}	Vulnerable^{[n 34]}	Mitigated^[95]	Vulnerable	No
	8–10		OS X 10.10	No	Yes	Yes	Yes	Yes	No	Yes	Yes	Yes	Mitigated	Not affected	Mitigated^{[n 34]}	Lowest priority^[97]^{[n 34]}	Mitigated^[95]	Mitigated^[98]	No
	9–11		OS X 10.11	No	No	Yes	Yes	Yes	No	Yes	Yes	Yes	Mitigated	Not affected	Not affected	Lowest priority	Mitigated	Mitigated	No
	10–13		macOS 10.12,10.13	No	No	Yes	Yes	Yes	No	Yes	Yes	Yes	Mitigated	Not affected	Not affected	Disabled by default^{[n 16]}	Mitigated	Mitigated	No
	12–14		macOS10.14	No	No	Yes	Yes	Yes	Yes (Since macOS 10.14.4)^[99]	Yes	Yes	Yes	Mitigated	Not affected	Not affected	Disabled by default^{[n 16]}	Mitigated	Mitigated	No
	13–18		macOS10.15,11,12,13	No	No	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Mitigated	Not affected	Not affected	Disabled by default^{[n 16]}	Mitigated	Mitigated	No
	17–18	26	macOS 14	No	No	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Mitigated	Not affected	Not affected	Disabled by default^{[n 16]}	Mitigated	Mitigated	No
	18	26	macOS 15	No	No	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Mitigated	Not affected	Not affected	Disabled by default^{[n 16]}	Mitigated	Mitigated	No
	26		macOS 26	No	No	Disabled by default	Disabled by default^[100]	Yes	Yes	Yes	Yes	Yes	Mitigated	Not affected	Not affected	Disabled by default^{[n 16]}	Mitigated	Mitigated	No
Browser or OS API	Version		Platforms	SSL 2.0 (insecure)	SSL 3.0 (insecure)	TLS 1.0 (deprecated)	TLS 1.1 (deprecated)	TLS 1.2	TLS 1.3	EV certificate	SHA-2 certificate	ECDSA certificate	BEAST	CRIME	POODLE (SSLv3)	RC4	FREAK	Logjam	Protocol selection by user
Apple Safari (mobile)^{[n 35]}	3		iPhone OS1,2	No^[104]	Yes	Yes	No	No	No	No	No	No	Vulnerable	Not affected	Vulnerable	Vulnerable	Vulnerable	Vulnerable	No
	4, 5		iPhone OS 3,iOS 4	No	Yes	Yes	No	No	No	Yes^[105]	Yes	Yes (Since iOS 4)^[78]	Vulnerable	Not affected	Vulnerable	Vulnerable	Vulnerable	Vulnerable	No
	5, 6		iOS5,6	No	Yes	Yes	Yes^[101]	Yes^[101]	No	Yes	Yes	Yes	Vulnerable	Not affected	Vulnerable	Vulnerable	Vulnerable	Vulnerable	No
	7		iOS 7	No	Yes	Yes	Yes	Yes	No	Yes	Yes	Yes^[106]	Mitigated^[107]	Not affected	Vulnerable	Vulnerable	Vulnerable	Vulnerable	No
	8		iOS 8	No	Yes	Yes	Yes	Yes	No	Yes	Yes	Yes	Mitigated	Not affected	Mitigated^{[n 34]}	Lowest priority^[108]^{[n 34]}	Mitigated^[109]	Mitigated^[110]	No
	9		iOS 9	No	No	Yes	Yes	Yes	No	Yes	Yes	Yes	Mitigated	Not affected	Not affected	Lowest priority	Mitigated	Mitigated	No
	10, 11		iOS10,11	No	No	Yes	Yes	Yes	No	Yes	Yes	Yes	Mitigated	Not affected	Not affected	Disabled by default^{[n 16]}	Mitigated	Mitigated	No
	12		iOS 12	No	No	Yes	Yes	Yes	Yes (Since iOS 12.2)^[99]	Yes	Yes	Yes	Mitigated	Not affected	Not affected	Disabled by default^{[n 16]}	Mitigated	Mitigated	No
	13–17		iOS 13–17	No	No	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Mitigated	Not affected	Not affected	Disabled by default^{[n 16]}	Mitigated	Mitigated	No
	13–17		iPadOS 13–17	No	No	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Mitigated	Not affected	Not affected	Disabled by default^{[n 16]}	Mitigated	Mitigated	No
	18		iOS 18	No	No	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Mitigated	Not affected	Not affected	Disabled by default^{[n 16]}	Mitigated	Mitigated	No
	18		iPadOS 18	No	No	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Mitigated	Not affected	Not affected	Disabled by default^{[n 16]}	Mitigated	Mitigated	No
	26		iOS 26	No	No	Disabled by default	Disabled by default^[111]	Yes	Yes	Yes	Yes	Yes	Mitigated	Not affected	Not affected	Disabled by default^{[n 16]}	Mitigated	Mitigated	No
	26		iPadOS 26	No	No	Disabled by default	Disabled by default^[111]	Yes	Yes	Yes	Yes	Yes	Mitigated	Not affected	Not affected	Disabled by default^{[n 16]}	Mitigated	Mitigated	No
Browser or OS API	Version		Platforms	SSL 2.0 (insecure)	SSL 3.0 (insecure)	TLS 1.0 (deprecated)	TLS 1.1 (deprecated)	TLS 1.2	TLS 1.3	EV^{[n 3]}	SHA-2	ECDSA	BEAST^{[n 4]}	CRIME^{[n 5]}	POODLE (SSLv3)^{[n 6]}	RC4^{[n 7]}	FREAK^[4]^[5]	Logjam	Protocol selection by user
Google Android OS^[112]	Android1.0–4.0.4			No	Yes	Yes	No	No	No	?	Yes^[2]	Yes (Since 3.0)^[78]^[3]	?	?	Vulnerable	Vulnerable	Vulnerable	Vulnerable	No
	Android4.1–4.4.4			No	Yes	Yes	Disabled by default^[113]	Disabled by default^[113]	No	?	Yes	Yes	?	?	Vulnerable	Vulnerable	Vulnerable	Vulnerable	No
	Android5.0–5.0.2			No	Yes	Yes	Yes^[113]^[114]	Yes^[113]^[114]	No	?	Yes	Yes	?	?	Vulnerable	Vulnerable	Vulnerable	Vulnerable	No
	Android5.1–5.1.1			No	Disabled by default^{[citation needed]}	Yes	Yes	Yes	No	?	Yes	Yes	?	?	Not affected	Only as fallback^{[n 15]}	Mitigated	Mitigated	No
	Android6.0–7.1.2			No	Disabled by default^{[citation needed]}	Yes	Yes	Yes	No	?	Yes	Yes	?	?	Not affected	Disabled by default	Mitigated	Mitigated	No
	Android8.0–9			No	No^[115]	Yes	Yes	Yes	No	?	Yes	Yes	?	?	Not affected	Disabled by default	Mitigated	Mitigated	No
	Android10–12.1			No	No	Yes	Yes	Yes	Yes	?	Yes	Yes	?	?	Not affected	Disabled by default	Mitigated	Mitigated	No
	Android13			No	No	Yes	Yes	Yes	Yes	?	Yes	Yes	?	?	Not affected	Disabled by default	Mitigated	Mitigated	No
	Android14			No	No	Yes	Yes	Yes	Yes	?	Yes	Yes	?	?	Not affected	Disabled by default	Mitigated	Mitigated	No
	Android15			No	No	Disabled by default	Disabled by default^[116]	Yes	Yes	?	Yes	Yes	?	?	Not affected	Disabled by default	Mitigated	Mitigated	No
	Android16			No	No	Disabled by default	Disabled by default	Yes	Yes	?	Yes	Yes	?	?	Not affected	Disabled by default	Mitigated	Mitigated	No
Browser or OS API	Version		Platforms	SSL 2.0 (insecure)	SSL 3.0 (insecure)	TLS 1.0 (deprecated)	TLS 1.1 (deprecated)	TLS 1.2	TLS 1.3	EV certificate	SHA-2 certificate	ECDSA certificate	BEAST	CRIME	POODLE (SSLv3)	RC4	FREAK	Logjam	Protocol selection by user

Color or Note		Significance
Browser version	Platform	Significance
Browser version	Operating system	Future release; under development
Browser version	Operating system	Current latest release
Browser version	Operating system	Former release; still supported
Browser version	Operating system	Former release;long-term support still active, but will end in less than 12 months
Browser version	Operating system	Former release; no longer supported
N/a	Operating system	Mixed/Unspecified
Operating system(Version+)	Minimum required operating system version (for supported versions of the browser)
~~Operating system~~	No longer supported for thisoperating system

Notes

^Note actual security depends on other factors such as negotiated cipher, encryption strength, etc. (see§ Cipher table).
^Whether a user or administrator can choose the protocols to be used or not. If yes, several attacks such as BEAST (vulnerable in SSL 3.0 and TLS 1.0) or POODLE (vulnerable in SSL 3.0) can be avoided.
^^a ^bWhether EV SSL and DV SSL (normal SSL) can be distinguished by indicators (green lock icon, green address bar, etc.) or not.
^^a ^be.g. 1/n-1 record splitting.
^^a ^be.g. Disabling header compression inHTTPS/SPDY.
^^a ^b
- Complete mitigations; disabling SSL 3.0 itself, "anti-POODLE record splitting". "Anti-POODLE record splitting" is effective only with client-side implementation and valid according to the SSL 3.0 specification, however, it may also cause compatibility issues due to problems in server-side implementations.
- Partial mitigations; disabling fallback to SSL 3.0, TLS_FALLBACK_SCSV, disabling cipher suites withCBC mode of operation. If the server also supports TLS_FALLBACK_SCSV, the POODLE attack will fail against this combination of server and browser, but connections where the server does not support TLS_FALLBACK_SCSV and does support SSL 3.0 will still be vulnerable. If disabling cipher suites with CBC mode of operation in SSL 3.0, only cipher suites with RC4 are available, RC4 attacks become easier.
- When disabling SSL 3.0 manually, POODLE attack will fail.
^^a ^b
- Complete mitigation; disabling cipher suites with RC4.
- Partial mitigations to keeping compatibility with old systems; setting the priority of RC4 to lower.
^Google Chrome (andChromium) supports TLS 1.0, and TLS 1.1 from version 22 (it was added, then dropped from version 21). TLS 1.2 support had been added, then dropped from Chrome 29.^[6]^[7]^[8]
^Uses the TLS implementation provided byBoringSSL for Android, OS X, and Windows^[9] or byNSS forLinux. Google is switching the TLS library used in Chrome to BoringSSL from NSS completely.
^^a ^b ^c ^d ^e ^f ^g ^h ⁱ ^j ^k ^l ^m ⁿ ^o ^p ^q ^r ^s ^t ^u ^v ^w ^x ^y ^z ^aa ^ab ^ac ^ad ^ae ^af ^ag ^ah ^ai ^aj ^ak ^al ^amConfigure enabling/disabling of each protocols via setting/option (menu name is dependent on browsers).
^^a ^b ^c ^d ^e ^f ^g ^h ⁱ ^j ^k ^lconfigure the maximum and the minimum version of enabling protocols withcommand-line option.
^TLS_FALLBACK_SCSV is implemented.^[17] Fallback to SSL 3.0 is disabled since version 39.^[18]
^In addition to TLS_FALLBACK_SCSV and disabling a fallback to SSL 3.0, SSL 3.0 itself is disabled by default.^[18]
^^a ^b ^cConfigure the minimum version of enabling protocols via chrome://flags^[22] (the maximum version can be configured with command-line option).
^^a ^b ^c ^d ^e ^f ^gOnly when no cipher suites with other than RC4 is available, cipher suites with RC4 will be used as a fallback.
^^a ^b ^c ^d ^e ^f ^g ^h ⁱ ^j ^k ^l ^m ⁿ ^o ^p ^q ^r ^s ^t ^u ^v ^w ^x ^y ^z ^aa ^ab ^ac ^ad ^ae ^af ^ag ^ah ^ai ^aj ^ak ^al ^am ^an ^ao ^ap ^aqAll RC4 cipher suites are disabled by default.
^Uses the TLS implementation provided byNSS. As of Firefox 22, Firefox supports only TLS 1.0 despite the bundled NSS supporting TLS 1.1. Since Firefox 23, TLS 1.1 can be enabled, but was not enabled by default due to issues. Firefox 24 has TLS 1.2 support disabled by default. TLS 1.1 and TLS 1.2 have been enabled by default in Firefox 27 release.
^^a ^b ^c ^d ^e ^f ^g ^h ⁱ ^j ^k ^l ^m ⁿConfigure the maximum and the minimum version of enabling protocols via about:config.
^SSL 3.0 itself is disabled by default.^[40] In addition, fallback to SSL 3.0 is disabled since version 34,^[42] and TLS_FALLBACK_SCSV is implemented since 35.0 and ESR 31.3.0.^[40]^[43]
^^a ^b ^c ^d ^e ^fIE uses the TLS implementation of the Microsoft Windows operating system provided by theSchannel security support provider. TLS 1.1 and 1.2 are disabled by default until IE11.^[53]^[54]
^^a ^bWindows NT 3.1 supports IE 1–2,Windows NT 3.5 supports IE 1–3,Windows NT 3.51 andWindows NT 4.0 supports IE 1–6.
^^a ^b ^c ^dWindows XP as well as Server 2003 and older support only weak ciphers likeTriple DES and RC4 out of the box.^[58] The weak ciphers of these Schannel version are not only used for IE, but also for other Microsoft products running on this OS, likeMicrosoft Office orWindows Update. Only Windows Server 2003 can get a manual update to supportAES ciphers by KB948963^[59]
^^a ^b ^c ^dMS13-095 or MS14-049 for Windows Server 2003, Windows XP x64 and Windows XP SP3 (32-bit).
^^a ^b ^c ^d ^e ^f ^g ^hDTLS protocol counterpart version, however, is not supported.^[63]
^RC4 can be disabled except as a fallback (Only when no cipher suites with other than RC4 is available, cipher suites with RC4 will be used as a fallback).^[66]
^IE11 will continue to support these operating systems if they are with ESUs until at least October 13, 2026.
^^a ^bFallback to SSL 3.0 is sites blocked by default in Internet Explorer 11 for Protected Mode.^[68]^[69] SSL 3.0 is disabled by default in Internet Explorer 11 since April 2015.^[70]
^^a ^b ^c ^d ^e ^f ^g ^h ⁱ ^j ^k ^l ^m ⁿ ^o ^p ^q ^r ^s ^t ^u ^v ^w ^x ^y ^z ^aa ^ab ^ac ^ad ^ae ^afTLS 1.0 and 1.1 are disabled by default in Internet Explorer 11 and EdgeHTML since September 2022.^[71]^[72]
^IE11 ran out of support for GAC (formerly CB and SAC) editions of Windows 10 since June 15, 2022.^[75]^[76]
^^a ^b ^cCould be disabled via registry editing but need 3rd Party tools to do this.^[79]
^Edge (formerly known as Project Spartan) is based on a fork of the Internet Explorer 11 rendering engine.
^Safari uses the operating system implementation on Mac OS X, Windows (XP, Vista, 7)^[85] with unknown version,^[86] Safari 5 is the last version available for Windows. OS X 10.8 on have SecureTransport support for TLS 1.1 and 1.2^[87] Qualys SSL report simulates Safari 5.1.9 connecting with TLS 1.0 not 1.1 or 1.2.^[88]
^In September 2013, Apple implementedBEAST mitigation inOS X 10.8 (Mountain Lion), but it was not turned on by default, resulting in Safari still being theoretically vulnerable to the BEAST attack on that platform.^[90]^[91] BEAST mitigation has been enabled by default from OS X 10.8.5 updated in February 2014.^[92]
^^a ^b ^c ^d ^e ^f ^g ^hBecause Apple removed support for all CBC protocols in SSL 3.0 to mitigate POODLE,^[93]^[94] this leaves only RC4, which is also completely broken by the RC4 attacks in SSL 3.0.
^Mobile Safari and third-party software utilizing the system UIWebView library use theiOS operating system implementation, which supports TLS 1.2 as of iOS 5.0.^[101]^[102]^[103]

References

[edit]

^"What browsers support Extended Validation (EV) and display an EV indicator?".Symantec. Archived fromthe original on 2015-12-31. Retrieved2014-07-28.
^^a ^b ^c ^d ^e ^f ^g ^h ⁱ ^j"SHA-256 Compatibility".Archived from the original on 2015-07-01. Retrieved2015-06-12.
^^a ^b ^c ^d ^e ^f ^g ^h ⁱ ^j ^k ^l ^m ⁿ ^o ^p ^q ^r ^s"ECC Compatibility".Archived from the original on 2016-02-17. Retrieved2015-06-13.
^^a ^b"Tracking the FREAK Attack".Archived from the original on 2015-03-06. Retrieved2015-03-08.
^^a ^b"FREAK: Factoring RSA Export Keys".Archived from the original on 2015-03-11. Retrieved2015-03-08.
^"Dev Channel Update". 2012-05-29.Archived from the original on 2013-03-02. Retrieved2011-06-01.
^"Stable Channel Update". 2012-08-21.Archived from the original on 2012-08-25. Retrieved2012-08-22.
^Chromium Project (2013-05-30)."Chromium TLS 1.2 Implementation".
^"The Chromium Project: BoringSSL".Archived from the original on 2015-09-23. Retrieved2015-09-05.
^"Chrome Stable Release".Chrome Releases. 2011-10-25.Archived from the original on 2015-02-20. Retrieved2015-02-01.
^"SVN revision log on Chrome 10.0.648.127 release". Archived fromthe original on 2014-06-19. Retrieved2014-06-19.
^^a ^b"ImperialViolet – CRIME". 2012-09-22.Archived from the original on 2015-01-10. Retrieved2014-10-18.
^^a ^b"SSL/TLS Overview". 2008-08-06.Archived from the original on 2013-07-03. Retrieved2013-03-29.
^^a ^b"Chromium Issue 90392". 2008-08-06.Archived from the original on 2013-08-03. Retrieved2013-06-28.
^^a ^b"Issue 23503030 Merge 219882". 2013-09-03.Archived from the original on 2014-02-26. Retrieved2013-09-19.
^^a ^b"Issue 278370: Unable to submit client certificates over TLS 1.2 from Windows". 2013-08-23.Archived from the original on 2013-10-05. Retrieved2013-10-03.
^Möller, Bodo (2014-10-14)."This POODLE bites: exploiting the SSL 3.0 fallback".Google Online Security blog. Google (via Blogspot).Archived from the original on 2014-10-28. Retrieved2014-10-28.
^^a ^b ^c"An update on SSLv3 in Chrome".Security-dev. 2014-10-31. Retrieved2014-11-04.
^"Stable Channel Update".Mozilla Developer Network. 2014-02-20.Archived from the original on 2014-10-24. Retrieved2014-11-14.
^"Changelog for Chrome 33.0.1750.117".Google. Archived fromthe original on 2014-01-16. Retrieved2014-11-14.
^"Issue 318442: Update to NSS 3.15.3 and NSPR 4.10.2".Archived from the original on 2015-03-15. Retrieved2014-11-14.
^^a ^b"Issue 693963003: Add minimum TLS version control to about:flags and Finch gate it. – Code Review".Archived from the original on 2015-04-16. Retrieved2015-01-22.
^"Issue 375342: Drop RC4 Support".Archived from the original on 2015-09-12. Retrieved2015-05-22.
^"Issue 436391: Add info on end of life of SSLVersionFallbackMin & SSLVersionMin policy in documentation".Archived from the original on 2015-04-18. Retrieved2015-04-19.
^"Issue 490240: Increase minimum DH size to 1024 bits (tracking bug)".Archived from the original on 2015-09-12. Retrieved2015-05-29.
^^a ^b ^c ^d ^e ^f ^g"Intent to deprecate: RC4". Retrieved2015-12-21.
^^a ^b ^c ^d ^e ^f ^g"An update on SHA-1 certificates in Chrome". 2015-12-18.Archived from the original on 2015-12-18. Retrieved2015-12-21.
^^a ^b"Chrome Enterprise release notes - Google Chrome Enterprise Help".
^^a ^b"Microsoft Edge Browser Policy Documentation | Microsoft Docs".Docs.microsoft.com. 2021-10-15. Retrieved2022-02-15.
^^a ^b ^c ^d"Security in Firefox 2". 2008-08-06.Archived from the original on 2014-07-14. Retrieved2009-03-31.
^"Attack against TLS-protected communications".Mozilla Security Blog. Mozilla. 2011-09-27.Archived from the original on 2015-03-04. Retrieved2015-02-01.
^^a ^b"Introduction to SSL". MDN.Archived from the original on 2014-07-14. Retrieved2014-06-19.
^^a ^b"NSS 3.15.3 Release Notes".Mozilla Developer Network. Mozilla.Archived from the original on 2014-06-05. Retrieved2014-07-13.
^^a ^b"MFSA 2013-103: Miscellaneous Network Security Services (NSS) vulnerabilities".Mozilla.Archived from the original on 2014-07-14. Retrieved2014-07-13.
^"Bug 565047 – (RFC4346) Implement TLS 1.1 (RFC 4346)". Retrieved2013-10-29.
^"Bug 480514 – Implement support for TLS 1.2 (RFC 5246)". Retrieved2013-10-29.
^"Bug 733647 – Implement TLS 1.1 (RFC 4346) in Gecko (Firefox, Thunderbird), on by default". Retrieved2013-12-04.
^^a ^b"Firefox Notes – Desktop". 2014-02-04.Archived from the original on 2014-02-07. Retrieved2014-02-04.
^"Bug 861266 – Implement TLS 1.2 (RFC 5246) in Gecko (Firefox, Thunderbird), on by default". Retrieved2013-11-18.
^^a ^b ^c"The POODLE Attack and the End of SSL 3.0".Mozilla blog. Mozilla. 2014-10-14.Archived from the original on 2014-10-18. Retrieved2014-10-28.
^"Firefox — Notes (34.0) — Mozilla". mozilla.org. 2014-12-01.Archived from the original on 2015-04-09. Retrieved2015-04-03.
^"Bug 1083058 – A pref to control TLS version fallback". bugzilla.mozilla.org. Retrieved2014-11-06.
^"Bug 1036737 – Add support for draft-ietf-tls-downgrade-scsv to Gecko/Firefox". bugzilla.mozilla.org. Retrieved2014-10-29.
^^a ^b ^c"Bug 1166031 – Update to NSS 3.19.1". bugzilla.mozilla.org. Retrieved2015-05-29.
^"Bug 1088915 – Stop offering RC4 in the first handshakes". bugzilla.mozilla.org. Retrieved2014-11-04.
^"Firefox — Notes (39.0) — Mozilla". mozilla.org. 2015-06-30.Archived from the original on 2015-07-03. Retrieved2015-07-03.
^"Google, Microsoft, and Mozilla will drop RC4 encryption in Chrome, Edge, IE, and Firefox next year".VentureBeat. 2015-09-01.Archived from the original on 2015-09-05. Retrieved2015-09-05.
^"Intent to ship: RC4 disabled by default in Firefox 44".Archived from the original on 2011-01-22. Retrieved2015-10-18.
^"RC4 is now allowed only on whitelisted sites (Reverted)". Retrieved2015-11-02.
^"Firefox — Notes (44.0) — Mozilla". mozilla.org. 2016-01-26.Archived from the original on 2016-03-04. Retrieved2016-03-09.
^"Bug 1342082 – Disable TLS 1.3 for FF52 Release". Retrieved2017-03-29.
^^a ^b"Firefox 78.0, See All New Features, Updates and Fixes".
^Microsoft (2012-09-05)."Secure Channel".Archived from the original on 2012-08-29. Retrieved2012-10-18.
^Microsoft (2009-02-27)."MS-TLSP Appendix A".Archived from the original on 2013-09-27. Retrieved2009-03-19.
^^a ^b"What browsers only support SSLv2?". Retrieved2014-06-19.
^^a ^b ^c ^d"SHA2 and Windows – Windows PKI blog – Site Home – TechNet Blogs". 2010-09-30.Archived from the original on 2014-07-16. Retrieved2014-07-29.
^^a ^b ^c ^d ^e"HTTPS Security Improvements in Internet Explorer 7".Archived from the original on 2013-10-10. Retrieved2013-10-29.
^"TLS Cipher Suites". Microsoft.Archived from the original on 2017-03-13.
^"Cipher Suites in TLS/SSL (Schannel SSP) - Win32 apps".Archived from the original on 2015-03-11. Retrieved2017-07-19.
^^a ^b ^c ^d ^e ^fMSRC (2015-03-10).Vulnerability in Schannel Could Allow Security Feature Bypass (3046049).Security Bulletins (Technical report). MS15-031. Retrieved2021-10-24 – viaMicrosoft Docs.
^^a ^b ^c ^d ^e ^fMSRC (2015-05-12).Vulnerability in Schannel Could Allow Information Disclosure (3061518).Security Bulletins (Technical report). MS15-055. Retrieved2021-10-24 – viaMicrosoft Docs.
^^a ^b"Update to add support for TLS 1.1 and TLS 1.2 in Windows Server 2008 SP2, Windows Embedded POSReady 2009, and Windows Embedded Standard 2009". Retrieved2017-07-19.
^^a ^b ^c ^d ^e"Protocols in TLS/SSL (Schannel SSP) - Win32 apps".learn.microsoft.com. Retrieved2022-02-20.
^^a ^b"Windows 7 adds support for TLSv1.1 and TLSv1.2 – IEInternals – Site Home – MSDN Blogs".Archived from the original on 2013-12-26. Retrieved2013-10-29.
^Thomlinson, Matt (2014-11-11)."Hundreds of Millions of Microsoft Customers Now Benefit from Best-in-Class Encryption". Microsoft Security.Archived from the original on 2014-11-14. Retrieved2014-11-14.
^"Microsoft security advisory: Update for disabling RC4".Support.microsoft.com. Archived fromthe original on 11 March 2015. Retrieved20 February 2022.
^^a ^b"Internet Explorer 11 for Windows Server 2012 and Windows Embedded 8 Standard".Microsoft Support. 2019-04-16.
^"February 2015 security updates for Internet Explorer". 2015-02-11.Archived from the original on 2015-02-11. Retrieved2015-02-11.
^"Update turns on the setting to disable SSL 3.0 fallback for protected mode sites by default in Internet Explorer 11".Archived from the original on 2015-02-14. Retrieved2015-02-11.
^MSRC (2014-10-14).Vulnerability in SSL 3.0 Could Allow Information Disclosure.Security Advisories (Technical report). 3009008. Retrieved2021-10-24 – viaMicrosoft Docs.
^Pflug, Kyle (2020-03-31)."Plan for change: TLS 1.0 and TLS 1.1 soon to be disabled by default".Windows Blogs.
^"KB5017811—Manage Transport Layer Security (TLS) 1.0 and 1.1 after default behavior change on September 20, 2022".Microsoft Support. Retrieved2023-01-09.
^Microsoft (2013-09-24)."IE11 Changes".Archived from the original on 2013-10-30. Retrieved2013-11-01.
^^a ^b ^c ^d"TLS (Schannel SSP) changes in Windows 10 and Windows Server 2016". Microsoft. 2017-03-21. Archived fromthe original on 2017-03-30. Retrieved2017-03-29.
^"Internet Explorer 11 has retired and is officially out of support—what you need to know". June 15, 2022.
^"Internet Explorer 11 desktop app support ended for certain versions of Windows 10". June 15, 2022.
^https://techcommunity.microsoft.com/blog/windows-itpro-blog/what-to-know-about-windows-11-version-26h1/4491941
^^a ^b ^c ^d"What browsers work with Universal SSL".Archived from the original on 2016-03-04. Retrieved2015-06-15.
^"POODLE SSL vulnerability – secure your Windo… – Windows Phone 8 Development and Hacking".XDA Developers. 15 October 2014.Archived from the original on 2016-09-23.
^^a ^b"What TLS version is used in Windows Phone 8 for secure HTTP connections?". Microsoft.Archived from the original on 2016-03-04. Retrieved2014-11-07.
^"Qualys SSL Labs – Projects/User Agent Capabilities: Unknown".Archived from the original on 2017-03-01.
^^a ^b"Platform Security".TechNet.Microsoft Docs. 2014-06-25. Retrieved2021-10-24.
^"Release Notes: Important Issues in Windows 8.1 Preview".TechNet.Microsoft Docs. 2013-06-24. Retrieved2021-10-24.
^"W8.1(IE11) vs RC4".Qualys Community.Archived from the original on 2014-11-04. Retrieved2014-11-04.
^Adrian, Dimcev."Common browsers/libraries/servers and the associated cipher suites implemented".TLS Cipher Suites Project.Archived from the original on 2013-07-20.
^"Features".Safari. Apple. 2009-06-10.Archived from the original on 2013-04-20. Retrieved2009-06-10.
^"Curl: Patch to add TLS 1.1 and 1.2 support & replace deprecated functions in SecureTransport". Sweden: haxx.se.Archived from the original on 2017-03-01.
^"SSL Server Test: google.co.uk".Archived from the original on February 1, 2017.
^"Apple Secures Mac OS X with Mavericks Release". eSecurity Planet. 2013-10-25.Archived from the original on 2014-07-08. Retrieved2014-06-23.
^Ristic, Ivan (2013-09-10)."Is BEAST Still a Threat?". Qualys.Archived from the original on 2014-10-12.
^^a ^bRistić, Ivan (2013-10-31)."Apple enabled BEAST mitigations in OS X 10.9 Mavericks".Archived from the original on 2013-11-07. Retrieved2013-11-07.
^Ristić, Ivan (2014-02-26)."Apple finally releases patch for BEAST". Qualys.Archived from the original on 2014-07-14. Retrieved2014-07-01.
^"About Security Update 2014-005".Apple Support knowledge base article. Apple.Archived from the original on 2014-10-24.
^"About the security content of iOS 8.1".Apple Support knowledge base article. Apple.Archived from the original on 2014-10-23.
^^a ^b ^c"About Security Update 2015-002".Apple Support knowledge base article. Apple.Archived from the original on 2015-03-16. Retrieved2015-03-09.
^^a ^b"About the security content of OS X Mavericks v10.9".Archived from the original on 2014-07-04. Retrieved2014-06-20.
^"User Agent Capabilities: Safari 8/OS X 10.10". Qualys SSL Labs.Archived from the original on 2015-09-06. Retrieved2015-03-07.
^"About the security content of OS X Yosemite v10.10.4 and Security Update 2015-005".Archived from the original on 2015-07-02. Retrieved2015-07-03.
^^a ^bPauly, Tommy (2019-01-29)."TLS 1.3 in iOS".tls@ietf.org (Mailing list).
^"MacOS Tahoe 26 Release Notes".
^^a ^b ^c"Technical Note TN2287 – iOS 5 and TLS 1.2 Interoperability Issues". Apple. 2011-10-14.Archived from the original on 2011-09-07. Retrieved2012-12-10.
^Liebowitz, Matt (2011-10-13)."Apple issues huge software security patches".NBC News. Archived fromthe original on February 15, 2020. Retrieved2012-12-10.
^"Adventures with iOS UIWebviews".MWR Info Security. 2012-04-16.Archived from the original on 2013-03-20. Retrieved2012-12-10., section "HTTPS (SSL/TLS)"
^"Secure Transport Reference".Archived from the original on 2014-06-04. Retrieved2014-06-23.kSSLProtocol2 is deprecated in iOS
^"iPhone 3.0: Mobile Safari Gets Enhanced Security Certificate Visualization".The iPhone Blog. 2009-03-31. Archived fromthe original on 2009-04-03.
^"Projects/User Agent Capabilities: Safari 7/iOS 7.1". Qualys SSL Labs.Archived from the original on 2017-03-13.
^"SOAP Request fails randomly on one Server but works on another on iOS7".Stack Overflow. 2013-10-11. Retrieved2014-01-05.
^"User Agent Capabilities: Safari 8/iOS 8.1.2". Qualys SSL Labs.Archived from the original on 2016-03-04. Retrieved2015-03-07.
^"About the security content of iOS 8.2".Apple Support knowledge base article. Apple.Archived from the original on 2015-03-09. Retrieved2015-03-09.
^"About the security content of iOS 8.4".Archived from the original on 2015-07-03. Retrieved2015-07-03.
^"IOS & iPadOS 26 Release Notes".
^"SSLSocket|Android Developers".Archived from the original on 2015-03-18. Retrieved2015-03-11.
^^a ^b ^c ^d"SSLSocket|Android Developers".Archived from the original on 2016-03-04. Retrieved2015-12-17.
^^a ^b"Android 5.0 Behavior Changes|Android Developers".Archived from the original on 2015-03-09. Retrieved2015-03-11.
^"Android 8.0 Behavior Changes".Archived from the original on 2017-12-01.
^"Behavior changes: Apps targeting Android 15 or higher".

Retrieved from "https://en.wikipedia.org/w/index.php?title=Version_history_for_TLS/SSL_support_in_web_browsers&oldid=1338978229"

Categories:

Hidden categories:

[8]ページ先頭