Transport Layer Security Adoption

In applications design, Transport Layer Security (TLS) is usually implemented on top of Transport Layer protocols, encrypting all of the protocol-related data of protocols such as HTTP, FTP, SMTP, NNTP and XMPP.

Historically, TLS has been used primarily with reliable transport protocols such as the Transmission Control Protocol (TCP). However, it has also been implemented with datagram-oriented transport protocols, such as the User Datagram Protocol (UDP) and the Datagram Congestion Control Protocol (DCCP), usage of which has been standardized independently using the term Datagram Transport Layer Security (DTLS).

## Contents

* 1 Websites
* 2 Web browsers
* 3 Libraries
* 3.1 Other uses
* 4 References

## Websites

A primary use of TLS is to secure World Wide Web traffic between a website and a web browser encoded with the HTTP protocol. This use of TLS to secure HTTP traffic constitutes the HTTPS protocol.[1]

Website protocol support  Protocol
version  | Website
support[2] | Security[2][3]

|
|

SSL 2.0  | 1.9%  | Insecure
SSL 3.0  | 7.6%  | Insecure[4]
TLS 1.0  | 68.0%  | Depends on cipher[n 1] and client mitigations[n 2]
TLS 1.1  | 77.4%  | Depends on cipher[n 1] and client mitigations[n 2]
TLS 1.2  | 95.2%  | Depends on cipher[n 1] and client mitigations[n 2]
TLS 1.3  | 14.2%  | Secure

Notes

1. ↑ 1.0 1.1 1.2 see § Cipher table above
2. ↑ 2.0 2.1 2.2 see § Web browsers and § Attacks against TLS/SSL sections

## Web browsers

Further information: Software:Comparison of web browsers

As of April 2016[update], the latest versions of all major web browsers support TLS 1.0, 1.1, and 1.2, and have them enabled by default. However, not all supported Microsoft operating systems support the latest version of IE. Additionally, many operating systems currently support multiple versions of IE, but this has changed according to Microsoft's Internet Explorer Support Lifecycle Policy FAQ, "beginning January 12, 2016, only the most current version of Internet Explorer available for a supported operating system will receive technical support and security updates." The page then goes on to list the latest supported version of IE at that date for each operating system. The next critical date would be when an operating system reaches the end of life stage, which is in Microsoft's Windows lifecycle fact sheet.

There are still problems on several browser versions:

* TLS 1.1 and 1.2 supported, but disabled by default: Internet Explorer 10 for Server 2012 and Internet Explorer 9 for Server 2008[5]

Mitigations against known attacks are not enough yet:

* Mitigations against POODLE attack: some browsers already prevent fallback to SSL 3.0; however, this mitigation needs to be supported by not only clients but also servers. Disabling SSL 3.0 itself, implementation of "anti-POODLE record splitting", or denying CBC ciphers in SSL 3.0 is required.
* Google Chrome: complete (TLS_FALLBACK_SCSV is implemented since version 33, fallback to SSL 3.0 is disabled since version 39, SSL 3.0 itself is disabled by default since version 40. Support of SSL 3.0 itself was dropped since version 44.)
* Mozilla Firefox: complete (support of SSL 3.0 itself is dropped since version 39. SSL 3.0 itself is disabled by default and fallback to SSL 3.0 are disabled since version 34, TLS_FALLBACK_SCSV is implemented since version 35. In ESR, SSL 3.0 itself is disabled by default and TLS_FALLBACK_SCSV is implemented since ESR 31.3.)
* Internet Explorer: partial (only in version 11, SSL 3.0 is disabled by default since April 2015. Version 10 and older are still vulnerable against POODLE.)
* Opera: complete (TLS_FALLBACK_SCSV is implemented since version 20, "anti-POODLE record splitting", which is effective only with client-side implementation, is implemented since version 25, SSL 3.0 itself is disabled by default since version 27. Support of SSL 3.0 itself will be dropped since version 31.)
* Safari: complete (only on OS X 10.8 and later and iOS 8, CBC ciphers during fallback to SSL 3.0 is denied, but this means it will use RC4, which is not recommended as well. Support of SSL 3.0 itself is dropped on OS X 10.11 and later and iOS 9.)
* Mitigation against RC4 attacks:
* Google Chrome disabled RC4 except as a fallback since version 43. RC4 is disabled since Chrome 48.
* Firefox disabled RC4 except as a fallback since version 36. Firefox 44 disabled RC4 by default.
* Opera disabled RC4 except as a fallback since version 30. RC4 is disabled since Opera 35.
* Internet Explorer for Windows 7 / Server 2008 R2 and for Windows 8 / Server 2012 have set the priority of RC4 to lowest and can also disable RC4 except as a fallback through registry settings. Internet Explorer 11 Mobile 11 for Windows Phone 8.1 disable RC4 except as a fallback if no other enabled algorithm works. Edge and IE 11 disable RC4 completely in August 2016.
* Mitigation against FREAK attack:
* The Android Browser of Android 4 and older is still vulnerable to the FREAK attack.
* Internet Explorer 11 Mobile is still vulnerable to the FREAK attack.
* Google Chrome, Internet Explorer (desktop), Safari (desktop & mobile), and Opera (mobile) have FREAK mitigations in place.
* Mozilla Firefox on all platforms and Google Chrome on Windows were not affected by FREAK.

TLS/SSL support history of web browsers Browser  | Version  | Platforms  | SSL protocols  | TLS protocols  | Certificate support  | Vulnerabilities fixed[n 1] | Protocol selection by user
[n 2]

|
|
|
|
|
|
|

SSL 2.0 (insecure)  | SSL 3.0 (insecure)  | TLS 1.0  | TLS 1.1  | TLS 1.2  | TLS 1.3  | EV
[n 3][6] | SHA-2
[7] | ECDSA
[8] | BEAST[n 4] | CRIME[n 5] | POODLE (SSLv3)[n 6] | RC4[n 7] | FREAK[9][10] | Logjam
Google Chrome
(Chrome for Android)
[n 8]
[n 9] | 1–9  | Windows (7+)
OS X (10.10+)
Linux
Android (4.1+)
iOS (9.0+)
Chrome OS | Disabled by default  | Enabled by default  | Yes  | No  | No  | No  | Yes
(only desktop) | needs SHA-2 compatible OS[7] | needs ECC compatible OS[8] | Not affected
[15] | Vulnerable
(HTTPS) | Vulnerable  | Vulnerable  | Vulnerable
(except Windows) | Vulnerable  | Yes[n 10]
10–20  | No[16] | Enabled by default  | Yes  | No  | No  | No  | Yes
(only desktop) | needs SHA-2 compatible OS[7] | needs ECC compatible OS[8] | Not affected  | Vulnerable
(HTTPS/SPDY) | Vulnerable  | Vulnerable  | Vulnerable
(except Windows) | Vulnerable  | Yes[n 10]
21  | No  | Enabled by default  | Yes  | No  | No  | No  | Yes
(only desktop) | needs SHA-2 compatible OS[7] | needs ECC compatible OS[8] | Not affected  | Mitigated
[17] | Vulnerable  | Vulnerable  | Vulnerable
(except Windows) | Vulnerable  | Yes[n 10]
22–29  | No  | Enabled by default  | Yes  | Yes[18] | No[18][19][20][21] | No  | Yes
(only desktop) | needs SHA-2 compatible OS[7] | needs ECC compatible OS[8] | Not affected  | Mitigated  | Vulnerable  | Vulnerable  | Vulnerable
(except Windows) | Vulnerable  | Temporary
[n 11]
30–32  | No  | Enabled by default  | Yes  | Yes  | Yes​[19][20][21] | No  | Yes
(only desktop) | needs SHA-2 compatible OS[7] | needs ECC compatible OS[8] | Not affected  | Mitigated  | Vulnerable  | Vulnerable  | Vulnerable
(except Windows) | Vulnerable  | Temporary
[n 11]
33–37  | No  | Enabled by default  | Yes  | Yes  | Yes  | No  | Yes
(only desktop) | needs SHA-2 compatible OS[7] | needs ECC compatible OS[8] | Not affected  | Mitigated  | Partly mitigated
[n 12] | Lowest priority
[24][25][26] | Vulnerable
(except Windows) | Vulnerable  | Temporary
[n 11]
38, 39  | No  | Enabled by default  | Yes  | Yes  | Yes  | No  | Yes
(only desktop) | Yes  | needs ECC compatible OS[8] | Not affected  | Mitigated  | Partly mitigated  | Lowest priority  | Vulnerable
(except Windows) | Vulnerable  | Temporary
[n 11]
40  | No  | Disabled by default​[23][27] | Yes  | Yes  | Yes  | No  | Yes
(only desktop) | Yes  | needs ECC compatible OS[8] | Not affected  | Mitigated  | Mitigated
[n 13] | Lowest priority  | Vulnerable
(except Windows) | Vulnerable  | Yes[n 14]
41, 42  | No  | Disabled by default  | Yes  | Yes  | Yes  | No  | Yes
(only desktop) | Yes  | needs ECC compatible OS[8] | Not affected  | Mitigated  | Mitigated  | Lowest priority  | Mitigated  | Vulnerable  | Yes[n 14]
43  | No  | Disabled by default  | Yes  | Yes  | Yes  | No  | Yes
(only desktop) | Yes  | needs ECC compatible OS[8] | Not affected  | Mitigated  | Mitigated  | Only as fallback
[n 15][28] | Mitigated  | Vulnerable  | Yes[n 14]
44–47  | No  | No[29] | Yes  | Yes  | Yes  | No  | Yes
(only desktop) | Yes  | needs ECC compatible OS[8] | Not affected  | Mitigated  | Not affected  | Only as fallback
[n 15] | Mitigated  | Mitigated​[30] | Temporary
[n 11]
48, 49  | No  | No  | Yes  | Yes  | Yes  | No  | Yes
(only desktop) | Yes  | needs ECC compatible OS[8] | Not affected  | Mitigated  | Not affected  | Disabled by default​[n 16][31][32] | Mitigated  | Mitigated  | Temporary
[n 11]
50–53  | No  | No  | Yes  | Yes  | Yes  | No  | Yes
(only desktop) | Yes  | Yes  | Not affected  | Mitigated  | Not affected  | Disabled by default​[n 16][31][32] | Mitigated  | Mitigated  | Temporary
[n 11]
54–66  | No  | No  | Yes  | Yes  | Yes  | Disabled by default
(draft version) | Yes
(only desktop) | Yes  | Yes  | Not affected  | Mitigated  | Not affected  | Disabled by default​[n 16][31][32] | Mitigated  | Mitigated  | Temporary
[n 11]
67–69  | No  | No  | Yes  | Yes  | Yes  | Yes
(draft version) | Yes
(only desktop) | Yes  | Yes  | Not affected  | Mitigated  | Not affected  | Disabled by default​[n 16][31][32] | Mitigated  | Mitigated  | Temporary
[n 11]
70–74  | 75  | No  | No  | Yes  | Yes  | Yes  | Yes  | Yes
(only desktop) | Yes  | Yes  | Not affected  | Mitigated  | Not affected  | Disabled by default​[n 16][31][32] | Mitigated  | Mitigated  | Temporary
[n 11]
Browser  | Version  | Platforms  | SSL 2.0 (insecure)  | SSL 3.0 (insecure)  | TLS 1.0  | TLS 1.1  | TLS 1.2  | TLS 1.3  | EV certificate  | SHA-2 certificate  | ECDSA certificate  | BEAST  | CRIME  | POODLE (SSLv3)  | RC4  | FREAK  | Logjam  | Protocol selection by user
Google Android OS Browser
[33] | Android 1.0–2.3.7 | No  | Enabled by default  | Yes  | No  | No  | No  | Unknown  | Yes[7] | No  | Unknown  | Unknown  | Vulnerable  | Vulnerable  | Vulnerable  | Vulnerable  | No
Android 3.0–4.0.4 | No  | Enabled by default  | Yes  | No  | No  | No  | Unknown  | Yes  | Yes[34][8] | Unknown  | Unknown  | Vulnerable  | Vulnerable  | Vulnerable  | Vulnerable  | No
Android 4.1–4.4.4 | No  | Enabled by default  | Yes  | Disabled by default​[35] | Disabled by default​[35] | No  | Unknown  | Yes  | Yes  | Unknown  | Unknown  | Vulnerable  | Vulnerable  | Vulnerable  | Vulnerable  | No
Android 5.0–5.0.2 | No  | Enabled by default  | Yes  | Yes[35][36] | Yes[35][36] | No  | Unknown  | Yes  | Yes  | Unknown  | Unknown  | Vulnerable  | Vulnerable  | Vulnerable  | Vulnerable  | No
Android 5.1–5.1.1 | No  | Disabled by default
| Yes  | Yes  | Yes  | No  | Unknown  | Yes  | Yes  | Unknown  | Unknown  | Not affected  | Only as fallback
[n 15] | Mitigated  | Mitigated  | No
Android 6.0–6.0.1 | No  | Disabled by default
| Yes  | Yes  | Yes  | No  | Unknown  | Yes  | Yes  | Unknown  | Unknown  | Not affected  | Disabled by default  | Mitigated  | Mitigated  | No
Android 7.0–7.1.2
Android 8.0–8.1 | No  | No
[37] | Yes  | Yes  | Yes  | No  | Unknown  | Yes  | Yes  | Unknown  | Unknown  | Not affected  | Disabled by default  | Mitigated  | Mitigated  | No
Android 9.0
Android 10.0 | No  | No  | Yes  | Yes  | Yes  | Unknown  | Unknown  | Yes  | Yes  | Unknown  | Unknown  | Not affected  | Disabled by default  | Mitigated  | Mitigated  | No
Browser  | Version  | Platforms  | SSL 2.0 (insecure)  | SSL 3.0 (insecure)  | TLS 1.0  | TLS 1.1  | TLS 1.2  | TLS 1.3  | EV certificate  | SHA-2 certificate  | ECDSA certificate  | BEAST  | CRIME  | POODLE (SSLv3)  | RC4  | FREAK  | Logjam  | Protocol selection by user
Mozilla Firefox
(Firefox for mobile)
[n 17] | 1.0, 1.5  | Windows (7+)
OS X (10.9+)
Linux
Android (4.1+)
iOS (9.0+)
~~Firefox OS~~
~~Maemo~~

ESR only for:
Windows (7+)
OS X (10.9+)
Linux | Enabled by default
[38] | Enabled by default
[38] | Yes[38] | No  | No  | No  | No  | Yes[7] | No  | Not affected
[39] | Not affected  | Vulnerable  | Vulnerable  | Not affected  | Vulnerable  | Yes[n 10]
2  | Disabled by default
[38][40] | Enabled by default  | Yes  | No  | No  | No  | No  | Yes  | Yes[8] | Not affected  | Not affected  | Vulnerable  | Vulnerable  | Not affected  | Vulnerable  | Yes[n 10]
3–7  | Disabled by default  | Enabled by default  | Yes  | No  | No  | No  | Yes  | Yes  | Yes  | Not affected  | Not affected  | Vulnerable  | Vulnerable  | Not affected  | Vulnerable  | Yes[n 10]
8–10
ESR 10 | No[40] | Enabled by default  | Yes  | No  | No  | No  | Yes  | Yes  | Yes  | Not affected  | Not affected  | Vulnerable  | Vulnerable  | Not affected  | Vulnerable  | Yes[n 10]
11–14  | No  | Enabled by default  | Yes  | No  | No  | No  | Yes  | Yes  | Yes  | Not affected  | Vulnerable
(SPDY)[17] | Vulnerable  | Vulnerable  | Not affected  | Vulnerable  | Yes[n 10]
15–22
ESR 17.0–17.0.10 | No  | Enabled by default  | Yes  | No  | No  | No  | Yes  | Yes  | Yes  | Not affected  | Mitigated  | Vulnerable  | Vulnerable  | Not affected  | Vulnerable  | Yes[n 10]
ESR 17.0.11 | No  | Enabled by default  | Yes  | No  | No  | No  | Yes  | Yes  | Yes  | Not affected  | Mitigated  | Vulnerable  | Lowest priority
[41][42] | Not affected  | Vulnerable  | Yes[n 10]
23  | No  | Enabled by default  | Yes  | Disabled by default
[43] | No  | No  | Yes  | Yes  | Yes  | Not affected  | Mitigated  | Vulnerable  | Vulnerable  | Not affected  | Vulnerable  | Yes[n 18]
24, 25.0.0
ESR 24.0–24.1.0 | No  | Enabled by default  | Yes  | Disabled by default  | Disabled by default
[44] | No  | Yes  | Yes  | Yes  | Not affected  | Mitigated  | Vulnerable  | Vulnerable  | Not affected  | Vulnerable  | Yes[n 18]
25.0.1, 26
ESR 24.1.1 | No  | Enabled by default  | Yes  | Disabled by default  | Disabled by default  | No  | Yes  | Yes  | Yes  | Not affected  | Mitigated  | Vulnerable  | Lowest priority
[41][42] | Not affected  | Vulnerable  | Yes[n 18]
27–33
ESR 31.0–31.2 | No  | Enabled by default  | Yes  | Yes​[45][46] | Yes​[47][46] | No  | Yes  | Yes  | Yes  | Not affected  | Mitigated  | Vulnerable  | Lowest priority  | Not affected  | Vulnerable  | Yes[n 18]
34, 35
ESR 31.3–31.7 | No  | Disabled by default
[48][49] | Yes  | Yes  | Yes  | No  | Yes  | Yes  | Yes  | Not affected  | Mitigated  | Mitigated
[n 19] | Lowest priority  | Not affected  | Vulnerable  | Yes[n 18]
ESR 31.8 | No  | Disabled by default  | Yes  | Yes  | Yes  | No  | Yes  | Yes  | Yes  | Not affected  | Mitigated  | Mitigated  | Lowest priority  | Not affected  | Mitigated​[52] | Yes[n 18]
36–38
ESR 38.0 | No  | Disabled by default  | Yes  | Yes  | Yes  | No  | Yes  | Yes  | Yes  | Not affected  | Mitigated  | Mitigated  | Only as fallback
[n 15][53] | Not affected  | Vulnerable  | Yes[n 18]
ESR 38.1–38.8 | No  | Disabled by default  | Yes  | Yes  | Yes  | No  | Yes  | Yes  | Yes  | Not affected  | Mitigated  | Mitigated  | Only as fallback
[n 15] | Not affected  | Mitigated​[52] | Yes[n 18]
39–43  | No  | No[54] | Yes  | Yes  | Yes  | No  | Yes  | Yes  | Yes  | Not affected  | Mitigated  | Not affected  | Only as fallback
[n 15] | Not affected  | Mitigated​[52] | Yes[n 18]
44–48
ESR 45 | No  | No  | Yes  | Yes  | Yes  | No  | Yes  | Yes  | Yes  | Not affected  | Mitigated  | Not affected  | Disabled by default​[n 16][55][56][57][58] | Not affected  | Mitigated  | Yes[n 18]
49–59
ESR 52 | No  | No  | Yes  | Yes  | Yes  | Disabled by default
(draft version)​[59] | Yes  | Yes  | Yes  | Not affected  | Mitigated  | Not affected  | Disabled by default​[n 16] | Not affected  | Mitigated  | Yes[n 18]
60–62
ESR 60.0–60.7 | ESR 60.8 | No  | No  | Yes  | Yes  | Yes  | Yes
(draft version) | Yes  | Yes  | Yes  | Not affected  | Mitigated  | Not affected  | Disabled by default​[n 16] | Not affected  | Mitigated  | Yes[n 18]
63–67  | 68
ESR 68.0 | No  | No  | Yes  | Yes  | Yes  | Yes  | Yes  | Yes  | Yes  | Not affected  | Mitigated  | Not affected  | Disabled by default​[n 16] | Not affected  | Mitigated  | Yes[n 18]
Browser  | Version  | Platforms  | SSL 2.0 (insecure)  | SSL 3.0 (insecure)  | TLS 1.0  | TLS 1.1  | TLS 1.2  | TLS 1.3  | EV certificate  | SHA-2 certificate  | ECDSA certificate  | BEAST  | CRIME  | POODLE (SSLv3)  | RC4  | FREAK  | Logjam  | Protocol selection by user
Microsoft Internet Explorer
[n 20] | 1.x | Windows 3.1, 95, NT,[n 21][n 22]
Mac OS 7, 8 | No SSL/TLS support
2 | Yes  | No  | No  | No  | No  | No  | No  | No  | No  | No SSL 3.0 or TLS support  | Vulnerable  | Vulnerable  | Vulnerable  | N/A
3 | Yes  | Yes[62] | No  | No  | No  | No  | No  | No  | No  | Vulnerable  | Not affected  | Vulnerable  | Vulnerable  | Vulnerable  | Vulnerable  | Unknown
4, 5, 6 | Windows 3.1, 95, 98, NT, 2000[n 21][n 22]
Mac OS 7.1, 8, X,
Solaris, HP-UX | Enabled by default  | Enabled by default  | Disabled by default
[62] | No  | No  | No  | No  | No  | No  | Vulnerable  | Not affected  | Vulnerable  | Vulnerable  | Vulnerable  | Vulnerable  | Yes[n 10]
6 | Windows XP[n 22] | Enabled by default  | Enabled by default  | Disabled by default  | No  | No  | No  | No  | Yes
[n 23][63] | No  | Mitigated  | Not affected  | Vulnerable  | Vulnerable  | Vulnerable  | Vulnerable  | Yes[n 10]
7, 8 | Disabled by default
[64] | Enabled by default  | Yes[64] | No  | No  | No  | Yes  | Yes
[n 23][63] | No  | Mitigated  | Not affected  | Vulnerable  | Vulnerable  | Vulnerable  | Vulnerable  | Yes[n 10]
6 | Server 2003[n 22] | Enabled by default  | Enabled by default  | Disabled by default  | No  | No  | No  | No  | Yes
[n 23][63] | No  | Mitigated  | Not affected  | Vulnerable  | Vulnerable  | Mitigated
[67] | Mitigated
[68] | Yes[n 10]
7, 8 | Disabled by default
[64] | Enabled by default  | Yes[64] | No  | No  | No  | Yes  | Yes
[n 23][63] | No  | Mitigated  | Not affected  | Vulnerable  | Vulnerable  | Mitigated
[67] | Mitigated
[68] | Yes[n 10]
7, 8, 9 | Windows Vista | Disabled by default  | Enabled by default  | Yes  | No  | No  | No  | Yes  | Yes  | Yes[8] | Mitigated  | Not affected  | Vulnerable  | Vulnerable  | Mitigated
[67] | Mitigated
[68] | Yes[n 10]
7, 8[n 24] | 9 | Server 2008 | Disabled by default  | Enabled by default  | Yes  | Disabled by default​[5]
(KB4019276) | Disabled by default​[5]
(KB4019276) | No  | Yes  | Yes  | Yes[8] | Mitigated  | Not affected  | Vulnerable  | Vulnerable  | Mitigated
[67] | Mitigated
[68] | Yes[n 10]
8, 9, 10[n 24] | Windows 7
Server 2008 R2 | Disabled by default  | Enabled by default  | Yes  | Disabled by default
[70] | Disabled by default
[70] | No  | Yes  | Yes  | Yes  | Mitigated  | Not affected  | Vulnerable  | Lowest priority
[71][n 25] | Mitigated
[67] | Mitigated
[68] | Yes[n 10]
11 | Disabled by default  | Disabled by default
[n 26] | Yes  | Yes[73] | Yes[73] | No  | Yes  | Yes  | Yes  | Mitigated  | Not affected  | Mitigated
[n 26] | Disabled by default​[77] | Mitigated
[67] | Mitigated
[68] | Yes[n 10]
10[n 24] | Windows 8 | Disabled by default  | Enabled by default  | Yes  | Disabled by default
[70] | Disabled by default
[70] | No  | Yes  | Yes  | Yes  | Mitigated  | Not affected  | Vulnerable  | Lowest priority
[71][n 25] | Mitigated
[67] | Mitigated
[68] | Yes[n 10]
10 | Server 2012
11[78] | Windows 8.1 | Disabled by default  | Disabled by default
[n 26] | Yes  | Yes[73] | Yes[73] | No  | Yes  | Yes  | Yes  | Mitigated  | Not affected  | Mitigated
[n 26] | Disabled by default​[n 16] | Mitigated
[67] | Mitigated
[68] | Yes[n 10]
Server 2012 /
2012 R2
Browser  | Version  | Platforms  | SSL 2.0 (insecure)  | SSL 3.0 (insecure)  | TLS 1.0  | TLS 1.1  | TLS 1.2  | TLS 1.3  | EV certificate  | SHA-2 certificate  | ECDSA certificate  | BEAST  | CRIME  | POODLE (SSLv3)  | RC4  | FREAK  | Logjam  | Protocol selection by user
Microsoft Edge[n 27]
Client only

Internet Explorer
Client
and
Server (SAC)
[n 20] | IE 11 | Edge
12–13  | Windows 10
v1507–v1511  | Disabled by default  | Disabled by default  | Yes  | Yes  | Yes  | No  | Yes  | Yes  | Yes  | Mitigated  | Not affected  | Mitigated  | Disabled by default​[n 16] | Mitigated  | Mitigated  | Yes[n 10]
IE 11 | Edge 14 | Windows 10 v1607 | No[79] | Disabled by default  | Yes  | Yes  | Yes  | No  | Yes  | Yes  | Yes  | Mitigated  | Not affected  | Mitigated  | Disabled by default​[n 16] | Mitigated  | Mitigated  | Yes[n 10]
IE 11 | Edge 15 | Windows 10 v1703 | No  | Disabled by default  | Yes  | Yes  | Yes  | No  | Yes  | Yes  | Yes  | Mitigated  | Not affected  | Mitigated  | Disabled by default​[n 16] | Mitigated  | Mitigated  | Yes[n 10]
IE 11 | Edge 16 | Windows 10 v1709 | No  | Disabled by default  | Yes  | Yes  | Yes  | No  | Yes  | Yes  | Yes  | Mitigated  | Not affected  | Mitigated  | Disabled by default​[n 16] | Mitigated  | Mitigated  | Yes[n 10]
IE 11 | Server v1709 (SAC) | No  | Disabled by default  | Yes  | Yes  | Yes  | No  | Yes  | Yes  | Yes  | Mitigated  | Not affected  | Mitigated  | Disabled by default​[n 16] | Mitigated  | Mitigated  | Yes[n 10]
IE 11 | Edge 17 | Windows 10 v1803 | No  | Disabled by default  | Yes  | Yes  | Yes  | No  | Yes  | Yes  | Yes  | Mitigated  | Not affected  | Mitigated  | Disabled by default​[n 16] | Mitigated  | Mitigated  | Yes[n 10]
IE 11 | Server v1803 (SAC) | No  | Disabled by default  | Yes  | Yes  | Yes  | No  | Yes  | Yes  | Yes  | Mitigated  | Not affected  | Mitigated  | Disabled by default​[n 16] | Mitigated  | Mitigated  | Yes[n 10]
IE 11 | Edge 18 | Windows 10 v1809 | No  | Disabled by default  | Yes  | Yes  | Yes  | No  | Yes  | Yes  | Yes  | Mitigated  | Not affected  | Mitigated  | Disabled by default​[n 16] | Mitigated  | Mitigated  | Yes[n 10]
IE 11 | Server v1809 (SAC) | No  | Disabled by default  | Yes  | Yes  | Yes  | No  | Yes  | Yes  | Yes  | Mitigated  | Not affected  | Mitigated  | Disabled by default​[n 16] | Mitigated  | Mitigated  | Yes[n 10]
IE 11 | Edge 18 | Windows 10 v1903 | No  | Disabled by default  | Yes  | Yes  | Yes  | Disabled by default (experimental)  | Yes  | Yes  | Yes  | Mitigated  | Not affected  | Mitigated  | Disabled by default​[n 16] | Mitigated  | Mitigated  | Yes[n 10]
IE 11 | Server v1903 (SAC) | No  | Disabled by default  | Yes  | Yes  | Yes  | Disabled by default (experimental)  | Yes  | Yes  | Yes  | Mitigated  | Not affected  | Mitigated  | Disabled by default​[n 16] | Mitigated  | Mitigated  | Yes[n 10]
IE 11 | Edge 18 | Windows 10 v19H2 | No  | Disabled by default  | Yes  | Yes  | Yes  | Unknown  | Yes  | Yes  | Yes  | Mitigated  | Not affected  | Mitigated  | Disabled by default​[n 16] | Mitigated  | Mitigated  | Yes[n 10]
IE 11 | Server v19H2 (SAC) | No  | Disabled by default  | Yes  | Yes  | Yes  | Unknown  | Yes  | Yes  | Yes  | Mitigated  | Not affected  | Mitigated  | Disabled by default​[n 16] | Mitigated  | Mitigated  | Yes[n 10]
IE 11 | Edge | Windows 10 v20H1 | No  | Disabled by default  | Yes  | Yes  | Yes  | Unknown  | Yes  | Yes  | Yes  | Mitigated  | Not affected  | Mitigated  | Disabled by default​[n 16] | Mitigated  | Mitigated  | Yes[n 10]
IE 11 | Server v20H1 (SAC) | No  | Disabled by default  | Yes  | Yes  | Yes  | Unknown  | Yes  | Yes  | Yes  | Mitigated  | Not affected  | Mitigated  | Disabled by default​[n 16] | Mitigated  | Mitigated  | Yes[n 10]
Microsoft Internet Explorer
Client
(LTSB/C)
and
Server
(LTSB/C)
[n 20] | IE 11 | Windows 10 LTSB 2015 (v1507)[n 28] | Disabled by default  | Disabled by default  | Yes  | Yes  | Yes  | No  | Yes  | Yes  | Yes  | Mitigated  | Not affected  | Mitigated  | Disabled by default​[n 16] | Mitigated  | Mitigated  | Yes[n 10]
IE 11 | Windows 10 LTSB 2016 (v1607) | No[79] | Disabled by default  | Yes  | Yes  | Yes  | No  | Yes  | Yes  | Yes  | Mitigated  | Not affected  | Mitigated  | Disabled by default​[n 16] | Mitigated  | Mitigated  | Yes[n 10]
IE 11 | Server 2016
v1607 (LTSB) | No[79] | Disabled by default  | Yes  | Yes  | Yes  | No  | Yes  | Yes  | Yes  | Mitigated  | Not affected  | Mitigated  | Disabled by default​[n 16] | Mitigated  | Mitigated  | Yes[n 10]
IE 11 | Windows 10 LTSC 2019 (v1809) | No  | Disabled by default  | Yes  | Yes  | Yes  | No  | Yes  | Yes  | Yes  | Mitigated  | Not affected  | Mitigated  | Disabled by default​[n 16] | Mitigated  | Mitigated  | Yes[n 10]
IE 11 | Server 2019
v1809 (LTSC) | No  | Disabled by default  | Yes  | Yes  | Yes  | No  | Yes  | Yes  | Yes  | Mitigated  | Not affected  | Mitigated  | Disabled by default​[n 16] | Mitigated  | Mitigated  | Yes[n 10]
Browser  | Version  | Platforms  | SSL 2.0 (insecure)  | SSL 3.0 (insecure)  | TLS 1.0  | TLS 1.1  | TLS 1.2  | TLS 1.3  | EV certificate  | SHA-2 certificate  | ECDSA certificate  | BEAST  | CRIME  | POODLE (SSLv3)  | RC4  | FREAK  | Logjam  | Protocol selection by user
Microsoft Internet Explorer Mobile
[n 20] | 7, 9 | Windows Phone 7, 7.5, 7.8 | Disabled by default
[64] | Enabled by default  | Yes  | No
| No
| No  | No
| Yes  | Yes[34] | Unknown  | Not affected  | Vulnerable  | Vulnerable  | Vulnerable  | Vulnerable  | Only with 3rd party tools[n 29]
10 | Windows Phone 8 | Disabled by default  | Enabled by default  | Yes  | Disabled by default
[82] | Disabled by default
[82] | No  | No
| Yes  | Yes[83] | Mitigated  | Not affected  | Vulnerable  | Vulnerable  | Vulnerable  | Vulnerable  | Only with 3rd party tools[n 29]
11 | Windows Phone 8.1 | Disabled by default  | Enabled by default  | Yes  | Yes[84] | Yes[84] | No  | No
| Yes  | Yes  | Mitigated  | Not affected  | Vulnerable  | Only as fallback
[n 15][85][86] | Vulnerable  | Vulnerable  | Only with 3rd party tools[n 29]
Microsoft Edge
[n 27] | Edge 13 | Windows 10 Mobile v1511 | Disabled by default  | Disabled by default  | Yes  | Yes  | Yes  | No  | Yes  | Yes  | Yes  | Mitigated  | Not affected  | Mitigated  | Disabled by default​[n 16] | Mitigated  | Mitigated  | No
Edge 14 | Windows 10 Mobile v1607 | No[79] | Disabled by default  | Yes  | Yes  | Yes  | No  | Yes  | Yes  | Yes  | Mitigated  | Not affected  | Mitigated  | Disabled by default​[n 16] | Mitigated  | Mitigated  | No
Edge 15 | Windows 10 Mobile v1703 | No  | Disabled by default  | Yes  | Yes  | Yes  | No  | Yes  | Yes  | Yes  | Mitigated  | Not affected  | Mitigated  | Disabled by default​[n 16] | Mitigated  | Mitigated  | No
Windows 10 Mobile v1709 | No  | Disabled by default  | Yes  | Yes  | Yes  | No  | Yes  | Yes  | Yes  | Mitigated  | Not affected  | Mitigated  | Disabled by default​[n 16] | Mitigated  | Mitigated  | No
Browser  | Version  | Platforms  | SSL 2.0 (insecure)  | SSL 3.0 (insecure)  | TLS 1.0  | TLS 1.1  | TLS 1.2  | TLS 1.3  | EV certificate  | SHA-2 certificate  | ECDSA certificate  | BEAST  | CRIME  | POODLE (SSLv3)  | RC4  | FREAK  | Logjam  | Protocol selection by user
Opera Browser
(Opera Mobile)
(Pre-Presto and Presto)
[n 30] | 1–2  | ~~Windows~~
~~MacOS~~
~~Linux~~
~~Android~~
~~Symbian S60~~
~~Maemo~~
~~Windows Mobile~~ | No SSL/TLS support[88]
3  | Yes[89] | No  | No  | No  | No  | No  | No  | No  | No  | No SSL 3.0 or TLS support  | Vulnerable  | Unknown  | Unknown  | N/A
4  | Yes  | Yes[90] | No  | No  | No  | No  | No  | No  | No  | Vulnerable  | Not affected  | Vulnerable  | Vulnerable  | Unknown  | Unknown  | Unknown
5  | Enabled by default  | Enabled by default  | Yes[91] | No  | No  | No  | No  | No  | No  | Vulnerable  | Not affected  | Vulnerable  | Vulnerable  | Unknown  | Unknown  | Yes[n 10]
6–7  | Enabled by default  | Enabled by default  | Yes[91] | No  | No  | No  | No  | Yes[7] | No  | Vulnerable  | Not affected  | Vulnerable  | Vulnerable  | Unknown  | Unknown  | Yes[n 10]
8  | Enabled by default  | Enabled by default  | Yes  | Disabled by default
[92] | No  | No  | No  | Yes  | No  | Vulnerable  | Not affected  | Vulnerable  | Vulnerable  | Unknown  | Unknown  | Yes[n 10]
9  | Disabled by default
[93] | Enabled by default  | Yes  | Yes  | No  | No  | since v9.5
(only desktop) | Yes  | No  | Vulnerable  | Not affected  | Vulnerable  | Vulnerable  | Unknown  | Unknown  | Yes[n 10]
10–11.52  | No[94] | Enabled by default  | Yes  | Disabled by default  | Disabled by default
[94] | No  | Yes
(only desktop) | Yes  | No  | Vulnerable  | Not affected  | Vulnerable  | Vulnerable  | Unknown  | Unknown  | Yes[n 10]
11.60–11.64  | No  | Enabled by default  | Yes  | Disabled by default  | Disabled by default  | No  | Yes
(only desktop) | Yes  | No  | Mitigated
[95] | Not affected  | Vulnerable  | Vulnerable  | Unknown  | Unknown  | Yes[n 10]
12–12.14  | No  | Disabled by default
[n 31] | Yes  | Disabled by default  | Disabled by default  | No  | Yes
(only desktop) | Yes  | No  | Mitigated  | Not affected  | Mitigated
[n 31] | Vulnerable  | Unknown  | Mitigated​[97] | Yes[n 10]
12.15–12.17  | No  | Disabled by default  | Yes  | Disabled by default  | Disabled by default  | No  | Yes
(only desktop) | Yes  | No  | Mitigated  | Not affected  | Mitigated  | Partly mitigated
[98][99] | Unknown  | Mitigated​[97] | Yes[n 10]
12.18  | No  | Disabled by default  | Yes  | Yes[100] | Yes[100] | No  | Yes
(only desktop) | Yes  | Yes[100] | Mitigated  | Not affected  | Mitigated  | Disabled by default​[n 16][100] | Mitigated​[100] | Mitigated​[97] | Yes[n 10]
Browser  | Version  | Platforms  | SSL 2.0 (insecure)  | SSL 3.0 (insecure)  | TLS 1.0  | TLS 1.1  | TLS 1.2  | TLS 1.3  | EV certificate  | SHA-2 certificate  | ECDSA certificate  | BEAST  | CRIME  | POODLE (SSLv3)  | RC4  | FREAK  | Logjam  | Protocol selection by user
Opera Browser
(Opera Mobile)
(Webkit and Blink)
[n 32] | 14–16  | Windows (7+)
OS X (10.9+)
Linux
Android (4.1+) | No  | Enabled by default  | Yes  | Yes[103] | No[103] | No  | Yes
(only desktop) | needs SHA-2 compatible OS[7] | needs ECC compatible OS[8] | Not affected  | Mitigated  | Vulnerable  | Vulnerable  | Vulnerable
(except Windows) | Vulnerable  | Temporary
[n 11]
17–19  | No  | Enabled by default  | Yes  | Yes[104] | Yes[104] | No  | Yes
(only desktop) | needs SHA-2 compatible OS[7] | needs ECC compatible OS[8] | Not affected  | Mitigated  | Vulnerable  | Vulnerable  | Vulnerable
(except Windows) | Vulnerable  | Temporary
[n 11]
20–24  | No  | Enabled by default  | Yes  | Yes  | Yes  | No  | Yes
(only desktop) | needs SHA-2 compatible OS[7] | needs ECC compatible OS[8] | Not affected  | Mitigated  | Partly mitigated
[n 33] | Lowest priority
[105] | Vulnerable
(except Windows) | Vulnerable  | Temporary
[n 11]
25, 26  | No  | Enabled by default
[n 34] | Yes  | Yes  | Yes  | No  | Yes
(only desktop) | Yes  | needs ECC compatible OS[8] | Not affected  | Mitigated  | Mitigated
[n 35] | Lowest priority  | Vulnerable
(except Windows) | Vulnerable  | Temporary
[n 11]
27  | No  | Disabled by default
[27] | Yes  | Yes  | Yes  | No  | Yes
(only desktop) | Yes  | needs ECC compatible OS[8] | Not affected  | Mitigated  | Mitigated
[n 36] | Lowest priority  | Vulnerable
(except Windows) | Vulnerable  | Yes[n 37]
(only desktop)
28, 29  | No  | Disabled by default  | Yes  | Yes  | Yes  | No  | Yes
(only desktop) | Yes  | needs ECC compatible OS[8] | Not affected  | Mitigated  | Mitigated  | Lowest priority  | Mitigated  | Vulnerable  | Yes[n 37]
(only desktop)
30  | No  | Disabled by default  | Yes  | Yes  | Yes  | No  | Yes
(only desktop) | Yes  | needs ECC compatible OS[8] | Not affected  | Mitigated  | Mitigated  | Only as fallback
[n 15][28] | Mitigated  | Mitigated​[97] | Yes[n 37]
(only desktop)
31–34  | No  | No[29] | Yes  | Yes  | Yes  | No  | Yes
(only desktop) | Yes  | needs ECC compatible OS[8] | Not affected  | Mitigated  | Not affected  | Only as fallback
[n 15][28] | Mitigated  | Mitigated  | Temporary
[n 11]
35, 36  | No  | No  | Yes  | Yes  | Yes  | No  | Yes
(only desktop) | Yes  | needs ECC compatible OS[8] | Not affected  | Mitigated  | Not affected  | Disabled by default​[n 16][31][32] | Mitigated  | Mitigated  | Temporary
[n 11]
37–40  | No  | No  | Yes  | Yes  | Yes  | No  | Yes
(only desktop) | Yes  | Yes  | Not affected  | Mitigated  | Not affected  | Disabled by default​[n 16][31][32] | Mitigated  | Mitigated  | Temporary
[n 11]
41–56  | No  | No  | Yes  | Yes  | Yes  | Disabled by default
(draft version) | Yes
(only desktop) | Yes  | Yes  | Not affected  | Mitigated  | Not affected  | Disabled by default​[n 16][31][32] | Mitigated  | Mitigated  | Temporary
[n 11]
57, 58, 60  | 62  | No  | No  | Yes  | Yes  | Yes  | Yes  | Yes
(only desktop) | Yes  | Yes  | Not affected  | Mitigated  | Not affected  | Disabled by default​[n 16][31][32] | Mitigated  | Mitigated  | Temporary
[n 11]
Browser  | Version  | Platforms  | SSL 2.0 (insecure)  | SSL 3.0 (insecure)  | TLS 1.0  | TLS 1.1  | TLS 1.2  | TLS 1.3  | EV certificate  | SHA-2 certificate  | ECDSA certificate  | BEAST  | CRIME  | POODLE (SSLv3)  | RC4  | FREAK  | Logjam  | Protocol selection by user
Apple Safari
[n 38] | 1  | Mac OS X 10.2, 10.3 | No[110] | Yes  | Yes  | No  | No  | No  | No  | No  | No  | Vulnerable  | Not affected  | Vulnerable  | Vulnerable  | Vulnerable  | Vulnerable  | No
2–5  | Mac OS X 10.4, 10.5, Win XP | No  | Yes  | Yes  | No  | No  | No  | since v3.2  | No  | No  | Vulnerable  | Not affected  | Vulnerable  | Vulnerable  | Vulnerable  | Vulnerable  | No
3–5  | ~~Vista, Win 7~~ | No  | Yes  | Yes  | No  | No  | No  | since v3.2  | No  | Yes[34] | Vulnerable  | Not affected  | Vulnerable  | Vulnerable  | Vulnerable  | Vulnerable  | No
4–6  | Mac OS X 10.6, 10.7 | No  | Yes  | Yes  | No  | No  | No  | Yes  | Yes[7] | Yes[8] | Vulnerable  | Not affected  | Vulnerable  | Vulnerable  | Vulnerable  | Vulnerable  | No
6  | OS X 10.8 | No  | Yes  | Yes  | No  | No  | No  | Yes  | Yes  | Yes[8] | Mitigated
[n 39] | Not affected  | Mitigated
[n 40] | Vulnerable
[n 40] | Mitigated
[116] | Vulnerable  | No
7, 9  | OS X 10.9 | No  | Yes  | Yes  | Yes[117] | Yes[117] | No  | Yes  | Yes  | Yes  | Mitigated
[112] | Not affected  | Mitigated
[n 40] | Vulnerable
[n 40] | Mitigated
[116] | Vulnerable  | No
8–10  | OS X 10.10 | No  | Yes  | Yes  | Yes  | Yes  | No  | Yes  | Yes  | Yes  | Mitigated  | Not affected  | Mitigated
[n 40] | Lowest priority
[118][n 40] | Mitigated
[116] | Mitigated
[119] | No
9–11  | OS X 10.11 | No  | No  | Yes  | Yes  | Yes  | No  | Yes  | Yes  | Yes  | Mitigated  | Not affected  | Not affected  | Lowest priority  | Mitigated  | Mitigated  | No
10, 11  | 12  | macOS 10.12 | No  | No  | Yes  | Yes  | Yes  | No  | Yes  | Yes  | Yes  | Mitigated  | Not affected  | Not affected  | Disabled by default​[n 16] | Mitigated  | Mitigated  | No
11  | 12  | macOS 10.13 | No  | No  | Yes  | Yes  | Yes  | No  | Yes  | Yes  | Yes  | Mitigated  | Not affected  | Not affected  | Disabled by default​[n 16] | Mitigated  | Mitigated  | No
12  | macOS 10.14.0–10.14.3 | No  | No  | Yes  | Yes  | Yes  | No  | Yes  | Yes  | Yes  | Mitigated  | Not affected  | Not affected  | Disabled by default​[n 16] | Mitigated  | Mitigated  | No
12  | macOS 10.14.4–10.14.5 | No  | No  | Yes  | Yes  | Yes  | Yes[120] | Yes  | Yes  | Yes  | Mitigated  | Not affected  | Not affected  | Disabled by default​[n 16] | Mitigated  | Mitigated  | No
13  | macOS 10.15 | No  | No  | Yes  | Yes  | Yes  | Yes[120] | Yes  | Yes  | Yes  | Mitigated  | Not affected  | Not affected  | Disabled by default​[n 16] | Mitigated  | Mitigated  | No
Browser  | Version  | Platforms  | SSL 2.0 (insecure)  | SSL 3.0 (insecure)  | TLS 1.0  | TLS 1.1  | TLS 1.2  | TLS 1.3  | EV certificate  | SHA-2 certificate  | ECDSA certificate  | BEAST  | CRIME  | POODLE (SSLv3)  | RC4  | FREAK  | Logjam  | Protocol selection by user
Apple Safari
(mobile)
[n 41] | 3  | iPhone OS 1, 2 | No[124] | Yes  | Yes  | No  | No  | No  | No  | No  | No  | Vulnerable  | Not affected  | Vulnerable  | Vulnerable  | Vulnerable  | Vulnerable  | No
4, 5  | iPhone OS 3, iOS 4 | No  | Yes  | Yes  | No  | No  | No  | Yes[125] | Yes  | since iOS 4[34] | Vulnerable  | Not affected  | Vulnerable  | Vulnerable  | Vulnerable  | Vulnerable  | No
5, 6  | iOS 5, 6 | No  | Yes  | Yes  | Yes[121] | Yes[121] | No  | Yes  | Yes  | Yes  | Vulnerable  | Not affected  | Vulnerable  | Vulnerable  | Vulnerable  | Vulnerable  | No
7  | iOS 7 | No  | Yes  | Yes  | Yes  | Yes  | No  | Yes  | Yes  | Yes[126] | Mitigated
[127] | Not affected  | Vulnerable  | Vulnerable  | Vulnerable  | Vulnerable  | No
8  | iOS 8 | No  | Yes  | Yes  | Yes  | Yes  | No  | Yes  | Yes  | Yes  | Mitigated  | Not affected  | Mitigated
[n 40] | Lowest priority
[128][n 40] | Mitigated
[129] | Mitigated
[130] | No
9  | iOS 9 | No  | No  | Yes  | Yes  | Yes  | No  | Yes  | Yes  | Yes  | Mitigated  | Not affected  | Not affected  | Lowest priority  | Mitigated  | Mitigated  | No
10–11  | iOS 10, 11 | No  | No  | Yes  | Yes  | Yes  | No  | Yes  | Yes  | Yes  | Mitigated  | Not affected  | Not affected  | Disabled by default​[n 16] | Mitigated  | Mitigated  | No
12  | iOS 12.0–12.1 | No  | No  | Yes  | Yes  | Yes  | No  | Yes  | Yes  | Yes  | Mitigated  | Not affected  | Not affected  | Disabled by default​[n 16] | Mitigated  | Mitigated  | No
12  | iOS 12.2–12.3 | No  | No  | Yes  | Yes  | Yes  | Yes[131] | Yes  | Yes  | Yes  | Mitigated  | Not affected  | Not affected  | Disabled by default​[n 16] | Mitigated  | Mitigated  | No
13  | iOS 13 | No  | No  | Yes  | Yes  | Yes  | Yes[131] | Yes  | Yes  | Yes  | Mitigated  | Not affected  | Not affected  | Disabled by default​[n 16] | Mitigated  | Mitigated  | No
iPadOS 13
Browser  | Version  | Platforms  | SSL 2.0 (insecure)  | SSL 3.0 (insecure)  | TLS 1.0  | TLS 1.1  | TLS 1.2  | TLS 1.3  | EV
[n 3] | SHA-2  | ECDSA  | BEAST[n 4] | CRIME[n 5] | POODLE (SSLv3)[n 6] | RC4[n 7] | FREAK[9][10] | Logjam  | Protocol selection by user
SSL protocols  | TLS protocols  | Certificate Support  | Vulnerabilities fixed
Color or Note  | Significance

|

Browser version  | Platform
Browser version  | Operating system  | Future release; under development
Browser version  | Operating system  | Current latest release
Browser version  | Operating system  | Former release; still supported
Browser version  | Operating system  | Former release; long-term support still active, but will end in less than 12 months
Browser version  | Operating system  | Former release; no longer supported
n/a  | Operating system  | Mixed / Unspecified
Operating system (Version+) | Minimum required operating system version (for supported versions of the browser)
~~Operating system~~ | No longer supported for this operating system

Notes

1. ↑ Does the browser have mitigations or is not vulnerable for the known attacks. Note actual security depends on other factors such as negotiated cipher, encryption strength etc (see § Cipher table).
2. ↑ Whether a user or administrator can choose the protocols to be used or not. If yes, several attacks such as BEAST (vulnerable in SSL 3.0 and TLS 1.0) or POODLE (vulnerable in SSL 3.0) can be avoided.
3. ↑ 3.0 3.1 Whether EV SSL and DV SSL (normal SSL) can be distinguished by indicators (green lock icon, green address bar, etc.) or not.
4. ↑ 4.0 4.1 e.g. 1/n-1 record splitting.
5. ↑ 5.0 5.1 e.g. Disabling header compression in HTTPS/SPDY.
6. ↑ 6.0 6.1
* Complete mitigations; disabling SSL 3.0 itself, "anti-POODLE record splitting". "Anti-POODLE record splitting" is effective only with client-side implementation and valid according to the SSL 3.0 specification, however, it may also cause compatibility issues due to problems in server-side implementations.
* Partial mitigations; disabling fallback to SSL 3.0, TLS_FALLBACK_SCSV, disabling cipher suites with CBC mode of operation. If the server also supports TLS_FALLBACK_SCSV, the POODLE attack will fail against this combination of server and browser, but connections where the server does not support TLS_FALLBACK_SCSV and does support SSL 3.0 will still be vulnerable. If disabling cipher suites with CBC mode of operation in SSL 3.0, only cipher suites with RC4 are available, RC4 attacks become easier.
* When disabling SSL 3.0 manually, POODLE attack will fail.
7. ↑ 7.0 7.1
* Complete mitigation; disabling cipher suites with RC4.
* Partial mitigations to keeping compatibility with old systems; setting the priority of RC4 to lower.
8. ↑ Google Chrome (and Chromium) supports TLS 1.0, and TLS 1.1 from version 22 (it was added, then dropped from version 21). TLS 1.2 support has been added, then dropped from Chrome 29.[11][12][13]
9. ↑ Uses the TLS implementation provided by BoringSSL for Android, OS X, and Windows[14] or by NSS for Linux. Google is switching the TLS library used in Chrome to BoringSSL from NSS completely.
10. ↑ 10.00 10.01 10.02 10.03 10.04 10.05 10.06 10.07 10.08 10.09 10.10 10.11 10.12 10.13 10.14 10.15 10.16 10.17 10.18 10.19 10.20 10.21 10.22 10.23 10.24 10.25 10.26 10.27 10.28 10.29 10.30 10.31 10.32 10.33 10.34 10.35 10.36 10.37 10.38 10.39 10.40 10.41 10.42 10.43 10.44 10.45 10.46 10.47 10.48 10.49 configure enabling/disabling of each protocols via setting/option (menu name is dependent on browsers)
11. ↑ 11.00 11.01 11.02 11.03 11.04 11.05 11.06 11.07 11.08 11.09 11.10 11.11 11.12 11.13 11.14 11.15 11.16 11.17 11.18 configure the maximum and the minimum version of enabling protocols with command-line option
12. ↑ TLS_FALLBACK_SCSV is implemented.[22] Fallback to SSL 3.0 is disabled since version 39.[23]
13. ↑ In addition to TLS_FALLBACK_SCSV and disabling a fallback to SSL 3.0, SSL 3.0 itself is disabled by default.[23]
14. ↑ 14.0 14.1 14.2 configure the minimum version of enabling protocols via chrome://flags[27] (the maximum version can be configured with command-line option)
15. ↑ 15.0 15.1 15.2 15.3 15.4 15.5 15.6 15.7 15.8 Only when no cipher suites with other than RC4 is available, cipher suites with RC4 will be used as a fallback.
16. ↑ 16.00 16.01 16.02 16.03 16.04 16.05 16.06 16.07 16.08 16.09 16.10 16.11 16.12 16.13 16.14 16.15 16.16 16.17 16.18 16.19 16.20 16.21 16.22 16.23 16.24 16.25 16.26 16.27 16.28 16.29 16.30 16.31 16.32 16.33 16.34 16.35 16.36 16.37 16.38 16.39 16.40 16.41 16.42 16.43 16.44 16.45 16.46 16.47 All RC4 cipher suites are disabled by default.
17. ↑ Uses the TLS implementation provided by NSS. As of Firefox 22, Firefox supports only TLS 1.0 despite the bundled NSS supporting TLS 1.1. Since Firefox 23, TLS 1.1 can be enabled, but was not enabled by default due to issues. Firefox 24 has TLS 1.2 support disabled by default. TLS 1.1 and TLS 1.2 have been enabled by default in Firefox 27 release.
18. ↑ 18.00 18.01 18.02 18.03 18.04 18.05 18.06 18.07 18.08 18.09 18.10 18.11 18.12 configure the maximum and the minimum version of enabling protocols via about:config
19. ↑ SSL 3.0 itself is disabled by default.[48] In addition, fallback to SSL 3.0 is disabled since version 34,[50] and TLS_FALLBACK_SCSV is implemented since 35.0 and ESR 31.3.[48][51]
20. ↑ 20.0 20.1 20.2 20.3 IE uses the TLS implementation of the Microsoft Windows operating system provided by the SChannel security support provider. TLS 1.1 and 1.2 are disabled by default until IE11.[60][61]
21. ↑ 21.0 21.1 Windows NT 3.1 supports IE 1–2, Windows NT 3.5 supports IE 1–3, Windows NT 3.51 and Windows NT 4.0 supports IE 1–6
22. ↑ 22.0 22.1 22.2 22.3 Windows XP as well as Server 2003 and older support only weak ciphers like 3DES and RC4 out of the box.[65] The weak ciphers of these SChannel version are not only used for IE, but also for other Microsoft products running on this OS, like Office or Windows Update. Only Windows Server 2003 can get a manually update to support AES ciphers by KB948963[66]
23. ↑ 23.0 23.1 23.2 23.3 MS13-095 or MS14-049 for 2003 and XP-64 or SP3 for XP (32-bit)
24. ↑ 24.0 24.1 24.2 Internet Explorer Support Announcement[69]
25. ↑ 25.0 25.1 RC4 can be disabled except as a fallback (Only when no cipher suites with other than RC4 is available, cipher suites with RC4 will be used as a fallback.)[72]
26. ↑ 26.0 26.1 26.2 26.3 Fallback to SSL 3.0 is sites blocked by default in Internet Explorer 11 for Protected Mode.[74][75] SSL 3.0 is disabled by default in Internet Explorer 11 since April 2015.[76]
27. ↑ 27.0 27.1 Edge (formerly known as Project Spartan) is based on a fork of the Internet Explorer 11 rendering engine.
28. ↑ Except Windows 10 LTSB 2015 (LongTermSupportBranch)[80]
29. ↑ 29.0 29.1 29.2 Could be disabled via registry editing but need 3rd Party tools to do this.[81]
30. ↑ Opera 10 added support for TLS 1.2 as of Presto 2.2. Previous support was for TLS 1.0 and 1.1. TLS 1.1 and 1.2 are disabled by default (except for version 9[87] that enabled TLS 1.1 by default).
31. ↑ 31.0 31.1 SSL 3.0 is disabled by default remotely since October 15, 2014[96]
32. ↑ TLS support of Opera 14 and above is same as that of Chrome, because Opera has migrated to Chromium backend (Opera 14 for Android is based on Chromium 26 with WebKit,[101] and Opera 15 and above are based on Chromium 28 and above with Blink[102]).
33. ↑ TLS_FALLBACK_SCSV is implemented.[105]
34. ↑ SSL 3.0 is enabled by default, with some mitigations against known vulnerabilities such as BEAST and POODLE implemented.[96]
35. ↑ In addition to TLS_FALLBACK_SCSV, "anti-POODLE record splitting" is implemented.[96]
36. ↑ In addition to TLS_FALLBACK_SCSV and "anti-POODLE record splitting", SSL 3.0 itself is disabled by default.[27]
37. ↑ 37.0 37.1 37.2 configure the minimum version of enabling protocols via opera://flags[27] (the maximum version can be configured with command-line option)
38. ↑ Safari uses the operating system implementation on Mac OS X, Windows (XP, Vista, 7)[106] with unknown version,[107] Safari 5 is the last version available for Windows. OS X 10.8 on have SecureTransport support for TLS 1.1 and 1.2[108] Qualys SSL report simulates Safari 5.1.9 connecting with TLS 1.0 not 1.1 or 1.2[109]
39. ↑ In September 2013, Apple implemented BEAST mitigation in OS X 10.8 (Mountain Lion), but it was not turned on by default resulting in Safari still being theoretically vulnerable to the BEAST attack on that platform.[111][112] BEAST mitigation has been enabled by default from OS X 10.8.5 updated in February 2014.[113]
40. ↑ 40.0 40.1 40.2 40.3 40.4 40.5 40.6 40.7 Because Apple removed support for all CBC protocols in SSL 3.0 to mitigate POODLE,[114][115] this leaves only RC4 which is also completely broken by the RC4 attacks in SSL 3.0.
41. ↑ Mobile Safari and third-party software utilizing the system UIWebView library use the iOS operating system implementation, which supports TLS 1.2 as of iOS 5.0.[121][122][123]

## Libraries

Main article: Comparison of TLS implementations

Most SSL and TLS programming libraries are free and open source software.

* BoringSSL, a fork of OpenSSL for Chrome/Chromium and Android as well as other Google applications.
* Botan, a BSD-licensed cryptographic library written in C++.
* cryptlib: a portable open source cryptography library (includes TLS/SSL implementation)
* Delphi programmers may use a library called Indy which utilizes OpenSSL or alternatively ICS which supports TLS 1.3 now.
* GnuTLS: a free implementation (LGPL licensed)
* Java Secure Socket Extension: a Java implementation included in the Java Runtime Environment supported TLS 1.1 and 1.2 starting with Java 7. (TLS 1.1/1.2 were initially disabled by default for client on Java 7, but were enabled in January 2017.[132]) Java 11 supports TLS 1.3.[133]
* LibreSSL: a fork of OpenSSL by OpenBSD project.
* MatrixSSL: a dual licensed implementation
* mbed TLS (previously PolarSSL): A tiny SSL library implementation for embedded devices that is designed for ease of use
* Network Security Services: FIPS 140 validated open source library
* OpenSSL: a free implementation (BSD license with some extensions)
* SChannel: an implementation of SSL and TLS Microsoft Windows as part of its package.
* Secure Transport: an implementation of SSL and TLS used in OS X and iOS as part of their packages.
* wolfSSL (previously CyaSSL): Embedded SSL/TLS Library with a strong focus on speed and size.

Library support for TLS/SSL  Implementation  | SSL 2.0 (insecure)  | SSL 3.0 (insecure)  | TLS 1.0  | TLS 1.1  | TLS 1.2  | TLS 1.3

|
|
|
|
|
|

Botan | No  | No[134] | Yes  | Yes  | Yes  |
cryptlib | No  | Disabled by default at compile time  | Yes  | Yes  | Yes  |
GnuTLS | No[a] | Disabled by default[135] | Yes  | Yes  | Yes  | yes
(draft version)[136]
Java Secure Socket Extension | No[a] | Disabled by default[137] | Yes  | Yes  | Yes  | Yes
LibreSSL | No[138] | No[139] | Yes  | Yes  | Yes  |
MatrixSSL | No  | Disabled by default at compile time[140] | Yes  | Yes  | Yes  | yes
(draft version)
mbed TLS (previously PolarSSL)  | No  | Disabled by default[141] | Yes  | Yes  | Yes  |
Network Security Services | No[b] | Disabled by default[142] | Yes  | Yes[143] | Yes[144] | Yes[145]
OpenSSL | No[146] | Enabled by default  | Yes  | Yes[147] | Yes[147] | Yes[148]
RSA BSAFE[149] | No  | Yes  | Yes  | Yes  | Yes  |
SChannel XP / 2003[150] | Disabled by default by MSIE 7  | Enabled by default  | Enabled by default by MSIE 7  | No  | No  | No
SChannel Vista[151] | Disabled by default  | Enabled by default  | Yes  | No  | No  | No
SChannel 2008[151] | Disabled by default  | Enabled by default  | Yes  | Disabled by default (KB4019276)[5] | Disabled by default (KB4019276)[5] | No
SChannel 7 / 2008 R2[152] | Disabled by default  | Disabled by default in MSIE 11  | Yes  | Enabled by default by MSIE 11  | Enabled by default by MSIE 11  | No
SChannel 8 / 2012[152] | Disabled by default  | Enabled by default  | Yes  | Disabled by default  | Disabled by default  | No
SChannel 8.1 / 2012 R2, 10 v1507 & v1511[152] | Disabled by default  | Disabled by default in MSIE 11  | Yes  | Yes  | Yes  | No
SChannel 10 v1607 / 2016[79] | No  | Disabled by default  | Yes  | Yes  | Yes  | No
Secure Transport OS X 10.2–10.8 / iOS 1–4  | Yes  | Yes  | Yes  | No  | No  |
Secure Transport OS X 10.9–10.10 / iOS 5–8  | No[c] | Yes  | Yes  | Yes[c] | Yes[c] |
Secure Transport OS X 10.11 / iOS 9  | No  | No[c] | Yes  | Yes  | Yes  |
Seed7 TLS/SSL Library | No  | Yes  | Yes  | Yes  | Yes  |
wolfSSL (previously CyaSSL)  | No  | Disabled by default[153] | Yes  | Yes  | Yes  | yes
(draft version)[154]
Implementation  | SSL 2.0 (insecure)  | SSL 3.0 (insecure)  | TLS 1.0  | TLS 1.1  | TLS 1.2  | TLS 1.3

1. ^ Server-side implementation of the SSL/TLS protocol still supports processing of received v2-compatible client hello messages.[155]
2. ^ Secure Transport: SSL 2.0 was discontinued in OS X 10.8. SSL 3.0 was discontinued in OS X 10.11 and iOS 9. TLS 1.1 and 1.2 are available on iOS 5.0 and later, and OS X 10.9 and later.[156]
[157]

A paper presented at the 2012 ACM conference on computer and communications security[158] showed that few applications used some of these SSL libraries correctly, leading to vulnerabilities. According to the authors

> "the root cause of most of these vulnerabilities is the terrible design of the APIs to the underlying SSL libraries. Instead of expressing high-level security properties of network tunnels such as confidentiality and authentication, these APIs expose low-level details of the SSL protocol to application developers. As a consequence, developers often use SSL APIs incorrectly, misinterpreting and misunderstanding their manifold parameters, options, side effects, and return values."

### Other uses

The Simple Mail Transfer Protocol (SMTP) can also be protected by TLS. These applications use public key certificates to verify the identity of endpoints.

TLS can also be used to tunnel an entire network stack to create a VPN, as is the case with OpenVPN and OpenConnect. Many vendors now marry TLS's encryption and authentication capabilities with authorization. There has also been substantial development since the late 1990s in creating client technology outside of the browser to enable support for client/server applications. When compared against traditional IPsec VPN technologies, TLS has some inherent advantages in firewall and NAT traversal that make it easier to administer for large remote-access populations.

TLS is also a standard method to protect Session Initiation Protocol (SIP) application signaling. TLS can be used to provide authentication and encryption of the SIP signaling associated with VoIP and other SIP-based applications.[citation needed]

## References

1. ↑ "Http vs https". Archived from the original on 2015-02-12. https://web.archive.org/web/20150212105201/https://www.instantssl.com/ssl-certificate-products/https.html. Retrieved 2015-02-12.
2. ↑ 2.0 2.1 As of May 3, 2019. "SSL Pulse: Survey of the SSL Implementation of the Most Popular Websites". https://www.ssllabs.com/ssl-pulse/. Retrieved 2019-05-09.
3. ↑ ivanr. "RC4 in TLS is Broken: Now What?". Qualsys Security Labs. Archived from the original on 2013-08-27. https://web.archive.org/web/20130827044512/https://community.qualys.com/blogs/securitylabs/2013/03/19/rc4-in-tls-is-broken-now-what. Retrieved 2013-07-30.
4. ↑ Cite error: Invalid `<ref>` tag; no text was provided for refs named `poodle_pdf`
5. ↑ 5.0 5.1 5.2 5.3 5.4 "Update to add support for TLS 1.1 and TLS 1.2 in Windows Server 2008 SP2, Windows Embedded POSReady 2009, and Windows Embedded Standard 2009". https://support.microsoft.com/kb/4019276. Retrieved 2017-07-19.
6. ↑ "What browsers support Extended Validation (EV) and display an EV indicator?". Symantec. Archived from the original on 2015-12-31. https://web.archive.org/web/20151231171309/https://knowledge.verisign.com/support/ssl-certificates-support/index?page=content&id=SO10090&actp=search&viewlocale=en_US&searchid=1406590748892. Retrieved 2014-07-28.
7. ↑ 7.00 7.01 7.02 7.03 7.04 7.05 7.06 7.07 7.08 7.09 7.10 7.11 7.12 7.13 "SHA-256 Compatibility". Archived from the original on 2015-07-01. https://web.archive.org/web/20150701004324/https://support.globalsign.com/customer/portal/articles/1499561-sha-256-compatibility. Retrieved 2015-06-12.
8. ↑ 8.00 8.01 8.02 8.03 8.04 8.05 8.06 8.07 8.08 8.09 8.10 8.11 8.12 8.13 8.14 8.15 8.16 8.17 8.18 8.19 8.20 8.21 8.22 8.23 8.24 8.25 8.26 8.27 "ECC Compatibility". Archived from the original on 2016-02-17. https://web.archive.org/web/20160217122951/https://support.globalsign.com/customer/portal/articles/1995283-ecc-compatibility. Retrieved 2015-06-13.
9. ↑ 9.0 9.1 "Tracking the FREAK Attack". Archived from the original on 2015-03-06. https://web.archive.org/web/20150306174623/https://freakattack.com/. Retrieved 2015-03-08.
10. ↑ 10.0 10.1 "FREAK: Factoring RSA Export Keys". Archived from the original on 2015-03-11. https://web.archive.org/web/20150311112517/https://www.smacktls.com/#freak. Retrieved 2015-03-08.
11. ↑ Google (2012-05-29). "Dev Channel Update". Archived from the original on 2013-03-02. https://web.archive.org/web/20130302032339/http://googlechromereleases.blogspot.nl/2012/05/dev-channel-update_29.html. Retrieved 2011-06-01.
12. ↑ Google (2012-08-21). "Stable Channel Update". Archived from the original on 2012-08-25. https://web.archive.org/web/20120825192441/http://googlechromereleases.blogspot.co.uk/2012/08/stable-channel-update_21.html. Retrieved 2012-08-22.
13. ↑ Chromium Project (2013-05-30). "Chromium TLS 1.2 Implementation". https://src.chromium.org/viewvc/chrome?revision=203090&view=revision.
14. ↑ "The Chromium Project: BoringSSL". Archived from the original on 2015-09-23. https://web.archive.org/web/20150923033459/http://www.chromium.org/Home/chromium-security/boringssl. Retrieved 2015-09-05.
15. ↑ "Chrome Stable Release". Chrome Releases. 2011-10-25. Archived from the original on 2015-02-20. https://web.archive.org/web/20150220020306/http://googlechromereleases.blogspot.jp/2011/10/chrome-stable-release.html. Retrieved 2015-02-01.
16. ↑ "SVN revision log on Chrome 10.0.648.127 release". https://build.chromium.org/f/chromium/perf/dashboard/ui/changelog.html?url=/trunk/src&range=72316:67679&mode=html. Retrieved 2014-06-19.
17. ↑ 17.0 17.1 "ImperialViolet – CRIME". 2012-09-22. Archived from the original on 2015-01-10. https://web.archive.org/web/20150110195746/https://www.imperialviolet.org/2012/09/21/crime.html. Retrieved 2014-10-18.
18. ↑ 18.0 18.1 "SSL/TLS Overview". 2008-08-06. Archived from the original on 2013-07-03. https://web.archive.org/web/20130703043525/https://sites.google.com/site/tlsssloverview/ssl-v-tls/tls-versions-and-browser-compatability. Retrieved 2013-03-29.
19. ↑ 19.0 19.1 "Chromium Issue 90392". 2008-08-06. Archived from the original on 2013-08-03. https://web.archive.org/web/20130803110745/http://code.google.com/p/chromium/issues/detail?id=90392. Retrieved 2013-06-28.
20. ↑ 20.0 20.1 "Issue 23503030 Merge 219882". 2013-09-03. Archived from the original on 2014-02-26. https://web.archive.org/web/20140226230020/https://codereview.chromium.org/23503030/. Retrieved 2013-09-19.
21. ↑ 21.0 21.1 "Issue 278370: Unable to submit client certificates over TLS 1.2 from Windows". 2013-08-23. Archived from the original on 2013-10-05. https://web.archive.org/web/20131005021656/http://code.google.com/p/chromium/issues/detail?id=278370. Retrieved 2013-10-03.
22. ↑ Möller, Bodo (2014-10-14). "This POODLE bites: exploiting the SSL 3.0 fallback". Google Online Security blog. Google (via Blogspot). Archived from the original on 2014-10-28. https://web.archive.org/web/20141028003952/http://googleonlinesecurity.blogspot.com/2014/10/this-poodle-bites-exploiting-ssl-30.html. Retrieved 2014-10-28.
23. ↑ 23.0 23.1 23.2 "An update on SSLv3 in Chrome.". Security-dev. 2014-10-31. https://groups.google.com/a/chromium.org/forum/#!topic/security-dev/Vnhy9aKM_l4. Retrieved 2014-11-04.
24. ↑ "Stable Channel Update". Mozilla Developer Network. 2014-02-20. Archived from the original on 2014-10-24. https://web.archive.org/web/20141024210105/http://googlechromereleases.blogspot.com/2014/02/stable-channel-update_20.html. Retrieved 2014-11-14.
25. ↑ "Changelog for Chrome 33.0.1750.117". Google. https://build.chromium.org/f/chromium/perf/dashboard/ui/changelog.html?url=/trunk/src&range=232870:241107&mode=html. Retrieved 2014-11-14.
26. ↑ "Issue 318442: Update to NSS 3.15.3 and NSPR 4.10.2". Archived from the original on 2015-03-15. https://web.archive.org/web/20150315043755/https://code.google.com/p/chromium/issues/detail?id=318442. Retrieved 2014-11-14.
27. ↑ 27.0 27.1 27.2 27.3 27.4 "Issue 693963003: Add minimum TLS version control to about:flags and Finch gate it. – Code Review". Archived from the original on 2015-04-16. https://web.archive.org/web/20150416072943/https://codereview.chromium.org/693963003. Retrieved 2015-01-22.
28. ↑ 28.0 28.1 28.2 "Issue 375342: Drop RC4 Support". Archived from the original on 2015-09-12. https://web.archive.org/web/20150912071452/https://code.google.com/p/chromium/issues/detail?id=375342. Retrieved 2015-05-22.
29. ↑ 29.0 29.1 "Issue 436391: Add info on end of life of SSLVersionFallbackMin & SSLVersionMin policy in documentation". Archived from the original on 2015-04-18. https://web.archive.org/web/20150418095600/http://code.google.com/p/chromium/issues/detail?id=436391. Retrieved 2015-04-19.
30. ↑ "Issue 490240: Increase minimum DH size to 1024 bits (tracking bug)". Archived from the original on 2015-09-12. https://web.archive.org/web/20150912081831/https://code.google.com/p/chromium/issues/detail?id=490240. Retrieved 2015-05-29.
31. ↑ 31.0 31.1 31.2 31.3 31.4 31.5 31.6 31.7 31.8 "Intent to deprecate: RC4". https://groups.google.com/a/chromium.org/forum/#!msg/security-dev/kVfCywocUO8/2BW3INFdDwAJ. Retrieved 2015-12-21.
32. ↑ 32.0 32.1 32.2 32.3 32.4 32.5 32.6 32.7 32.8 "An update on SHA-1 certificates in Chrome". 2015-12-18. Archived from the original on 2015-12-18. https://web.archive.org/web/20151218214756/https://googleonlinesecurity.blogspot.com/2015/12/an-update-on-sha-1-certificates-in.html. Retrieved 2015-12-21.
33. ↑ "SSLSocket | Android Developers". Archived from the original on 2015-03-18. https://web.archive.org/web/20150318121117/http://developer.android.com/reference/javax/net/ssl/SSLSocket.html. Retrieved 2015-03-11.
34. ↑ 34.0 34.1 34.2 34.3 "What browsers work with Universal SSL". Archived from the original on 2016-03-04. https://web.archive.org/web/20160304023941/https://support.cloudflare.com/hc/en-us/articles/203041594-What-browsers-work-with-Universal-SSL. Retrieved 2015-06-15.
35. ↑ 35.0 35.1 35.2 35.3 "SSLSocket | Android Developers". Archived from the original on 2016-03-04. https://web.archive.org/web/20160304202641/https://developer.android.com/reference/javax/net/ssl/SSLSocket.html. Retrieved 2015-12-17.
36. ↑ 36.0 36.1 "Android 5.0 Behavior Changes | Android Developers". Archived from the original on 2015-03-09. https://web.archive.org/web/20150309000956/http://developer.android.com/about/versions/android-5.0-changes.html#ssl. Retrieved 2015-03-11.
37. ↑ "Android 8.0 Behavior Changes". Archived from the original on 2017-12-01. https://web.archive.org/web/20171201042705/https://developer.android.com/about/versions/oreo/android-8.0-changes.html.
38. ↑ 38.0 38.1 38.2 38.3 "Security in Firefox 2". 2008-08-06. Archived from the original on 2014-07-14. https://web.archive.org/web/20140714142705/https://developer.mozilla.org/en-US/Firefox/Releases/2/Security_changes. Retrieved 2009-03-31.
39. ↑ "Attack against TLS-protected communications". Mozilla Security Blog. Mozilla. 2011-09-27. Archived from the original on 2015-03-04. https://web.archive.org/web/20150304221307/https://blog.mozilla.org/security/2011/09/27/attack-against-tls-protected-communications/. Retrieved 2015-02-01.
40. ↑ 40.0 40.1 "Introduction to SSL". MDN. Archived from the original on 2014-07-14. https://web.archive.org/web/20140714205945/https://developer.mozilla.org/en-US/docs/Introduction_to_SSL. Retrieved 2014-06-19.
41. ↑ 41.0 41.1 "NSS 3.15.3 Release Notes". Mozilla Developer Network. Mozilla. Archived from the original on 2014-06-05. https://web.archive.org/web/20140605001016/https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.15.3_release_notes. Retrieved 2014-07-13.
42. ↑ 42.0 42.1 "MFSA 2013-103: Miscellaneous Network Security Services (NSS) vulnerabilities". Mozilla. Mozilla. Archived from the original on 2014-07-14. https://web.archive.org/web/20140714121632/http://www.mozilla.org/security/announce/2013/mfsa2013-103.html. Retrieved 2014-07-13.
43. ↑ "Bug 565047 – (RFC4346) Implement TLS 1.1 (RFC 4346)". https://bugzilla.mozilla.org/show_bug.cgi?id=565047. Retrieved 2013-10-29.
44. ↑ "Bug 480514 – Implement support for TLS 1.2 (RFC 5246)". https://bugzilla.mozilla.org/show_bug.cgi?id=480514. Retrieved 2013-10-29.
45. ↑ "Bug 733647 – Implement TLS 1.1 (RFC 4346) in Gecko (Firefox, Thunderbird), on by default". https://bugzilla.mozilla.org/show_bug.cgi?id=733647. Retrieved 2013-12-04.
46. ↑ 46.0 46.1 "Firefox Notes – Desktop". 2014-02-04. Archived from the original on 2014-02-07. https://web.archive.org/web/20140207095334/https://website-archive.mozilla.org/www.mozilla.org/firefox_releasenotes/en-US/firefox/27.0/releasenotes/. Retrieved 2014-02-04.
47. ↑ "Bug 861266 – Implement TLS 1.2 (RFC 5246) in Gecko (Firefox, Thunderbird), on by default". https://bugzilla.mozilla.org/show_bug.cgi?id=861266. Retrieved 2013-11-18.
48. ↑ 48.0 48.1 48.2 "The POODLE Attack and the End of SSL 3.0". Mozilla blog. Mozilla. 2014-10-14. Archived from the original on 2014-10-18. https://web.archive.org/web/20141018231351/https://blog.mozilla.org/security/2014/10/14/the-poodle-attack-and-the-end-of-ssl-3-0/. Retrieved 2014-10-28.
49. ↑ "Firefox — Notes (34.0) — Mozilla". mozilla.org. 2014-12-01. Archived from the original on 2015-04-09. https://web.archive.org/web/20150409022558/https://www.mozilla.org/en-US/firefox/34.0/releasenotes/. Retrieved 2015-04-03.
50. ↑ "Bug 1083058 – A pref to control TLS version fallback". bugzilla.mozilla.org. https://bugzilla.mozilla.org/show_bug.cgi?id=1083058. Retrieved 2014-11-06.
51. ↑ "Bug 1036737 – Add support for draft-ietf-tls-downgrade-scsv to Gecko/Firefox". bugzilla.mozilla.org. https://bugzilla.mozilla.org/show_bug.cgi?id=1036737. Retrieved 2014-10-29.
52. ↑ 52.0 52.1 52.2 "Bug 1166031 – Update to NSS 3.19.1". bugzilla.mozilla.org. https://bugzilla.mozilla.org/show_bug.cgi?id=1166031. Retrieved 2015-05-29.
53. ↑ "Bug 1088915 – Stop offering RC4 in the first handshakes". bugzilla.mozilla.org. https://bugzilla.mozilla.org/show_bug.cgi?id=1088915. Retrieved 2014-11-04.
54. ↑ "Firefox — Notes (39.0) — Mozilla". mozilla.org. 2015-06-30. Archived from the original on 2015-07-03. https://web.archive.org/web/20150703163249/https://www.mozilla.org/en-US/firefox/39.0/releasenotes/. Retrieved 2015-07-03.
55. ↑ "Google, Microsoft, and Mozilla will drop RC4 encryption in Chrome, Edge, IE, and Firefox next year". VentureBeat. 2015-09-01. Archived from the original on 2015-09-05. https://web.archive.org/web/20150905214154/http://venturebeat.com/2015/09/01/google-microsoft-and-mozilla-will-drop-rc4-support-in-chrome-edge-ie-and-firefox-next-year/. Retrieved 2015-09-05.
56. ↑ "Intent to ship: RC4 disabled by default in Firefox 44". Archived from the original on 2011-01-22. http://arquivo.pt/wayback/20110122130054/https://groups.google.com/forum/#!searchin/mozilla.dev.platform/rc4/mozilla.dev.platform/JIEFcrGhqSM/CIjtpwxoLQAJ. Retrieved 2015-10-18.
57. ↑ "RC4 is now allowed only on whitelisted sites (Reverted)". https://www.fxsitecompat.com/en-US/docs/2015/rc4-is-now-allowed-only-on-whitelisted-sites/. Retrieved 2015-11-02.
58. ↑ "Firefox — Notes (44.0) — Mozilla". mozilla.org. 2016-01-26. Archived from the original on 2016-03-04. https://web.archive.org/web/20160304025010/https://www.mozilla.org/en-US/firefox/44.0/releasenotes/. Retrieved 2016-03-09.
59. ↑ "Bug 1342082 – Disable TLS 1.3 for FF52 Release". https://bugzilla.mozilla.org/show_bug.cgi?id=1342082. Retrieved 2017-03-29.
60. ↑ Microsoft (2012-09-05). "Secure Channel". Archived from the original on 2012-08-29. https://web.archive.org/web/20120829025314/http://msdn.microsoft.com/en-us/library/aa380123.aspx. Retrieved 2012-10-18.
61. ↑ Microsoft (2009-02-27). "MS-TLSP Appendix A". Archived from the original on 2013-09-27. https://web.archive.org/web/20130927055954/http://msdn.microsoft.com/en-us/library/dd208005.aspx. Retrieved 2009-03-19.
62. ↑ 62.0 62.1 "What browsers only support SSLv2?". https://stackoverflow.com/q/881563. Retrieved 2014-06-19.
63. ↑ 63.0 63.1 63.2 63.3 "SHA2 and Windows – Windows PKI blog – Site Home – TechNet Blogs". 2010-09-30. Archived from the original on 2014-07-16. https://web.archive.org/web/20140716230537/http://blogs.technet.com/b/pki/archive/2010/09/30/sha2-and-windows.aspx. Retrieved 2014-07-29.
64. ↑ 64.0 64.1 64.2 64.3 64.4 "HTTPS Security Improvements in Internet Explorer 7". Archived from the original on 2013-10-10. https://web.archive.org/web/20131010205312/http://msdn.microsoft.com/en-us/library/bb250503.aspx. Retrieved 2013-10-29.
65. ↑ "TLS Cipher Suites". Microsoft. Archived from the original on 2017-03-13. https://web.archive.org/web/20170313125201/https://msdn.microsoft.com/en-us/library/windows/desktop/aa380512.aspx.
66. ↑ "Archived copy". Archived from the original on 2015-03-11. https://web.archive.org/web/20150311105145/http://support.microsoft.com/kb/948963. Retrieved 2017-07-19.
67. ↑ 67.0 67.1 67.2 67.3 67.4 67.5 67.6 67.7 "Vulnerability in Schannel Could Allow Security Feature Bypass (3046049)". 2015-03-10. Archived from the original on 2017-03-13. https://web.archive.org/web/20170313130837/https://technet.microsoft.com/en-us/security/MS15-031. Retrieved 2015-03-11.
68. ↑ 68.0 68.1 68.2 68.3 68.4 68.5 68.6 68.7 "Vulnerability in Schannel Could Allow Information Disclosure (3061518)". 2015-05-12. Archived from the original on 2016-10-08. https://web.archive.org/web/20161008035505/https://technet.microsoft.com/en-us/security/MS15-055. Retrieved 2015-05-22.
69. ↑ "Microsoft Support Lifecycle". Microsoft. Archived from the original on 2015-03-10. https://web.archive.org/web/20150310050219/http://support.microsoft.com/gp/msl-ie-dotnet-an.
70. ↑ 70.0 70.1 70.2 70.3 "Windows 7 adds support for TLSv1.1 and TLSv1.2 – IEInternals – Site Home – MSDN Blogs". Archived from the original on 2013-12-26. https://web.archive.org/web/20131226222853/http://blogs.msdn.com/b/ieinternals/archive/2009/06/19/windows-7-support-for-tls-and-ciphers.aspx. Retrieved 2013-10-29.
71. ↑ 71.0 71.1 Thomlinson, Matt (2014-11-11). "Hundreds of Millions of Microsoft Customers Now Benefit from Best-in-Class Encryption". Microsoft Security. Archived from the original on 2014-11-14. https://web.archive.org/web/20141114143813/http://blogs.microsoft.com/cybertrust/2014/11/11/hundreds-of-millions-of-microsoft-customers-now-benefit-from-best-in-class-encryption/. Retrieved 2014-11-14.
72. ↑ Microsoft security advisory: Update for disabling RC4
73. ↑ 73.0 73.1 73.2 73.3 Microsoft (2013-09-24). "IE11 Changes". Archived from the original on 2013-10-30. https://web.archive.org/web/20131030114356/http://blogs.msdn.com/b/ieinternals/archive/2013/09/24/internet-explorer-11-changelist-change-log.aspx. Retrieved 2013-11-01.
74. ↑ "February 2015 security updates for Internet Explorer". 2015-02-11. Archived from the original on 2015-02-11. https://web.archive.org/web/20150211031724/http://blogs.msdn.com/b/ie/archive/2015/02/10/february-2015-security-updates-for-internet-explorer.aspx. Retrieved 2015-02-11.
75. ↑ "Update turns on the setting to disable SSL 3.0 fallback for protected mode sites by default in Internet Explorer 11". Archived from the original on 2015-02-14. https://web.archive.org/web/20150214082207/http://support.microsoft.com/kb/3038778. Retrieved 2015-02-11.
76. ↑ "Vulnerability in SSL 3.0 Could Allow Information Disclosure". 2015-04-14. Archived from the original on 2016-10-08. https://web.archive.org/web/20161008035547/https://technet.microsoft.com/en-us/security/3009008. Retrieved 2015-04-14.
77. ↑ Microsoft Edge Team (2016-08-09). "RC4 is now disabled in Microsoft Edge and Internet Explorer 11". Microsoft. Archived from the original on 2016-08-21. https://web.archive.org/web/20160821091621/https://blogs.windows.com/msedgedev/2016/08/09/rc4-now-deprecated/.
78. ↑ "Internet Explorer 11 for Windows Server 2012 and Windows Embedded 8 Standard". 2019-04-16. https://support.microsoft.com/en-us/help/4492872/update-for-internet-explorer-april-16-2019.
79. ↑ 79.0 79.1 79.2 79.3 79.4 "TLS (Schannel SSP) changes in Windows 10 and Windows Server 2016". Microsoft. 2017-03-21. Archived from the original on 2017-03-30. https://web.archive.org/web/20170330011044/https://technet.microsoft.com/en-us/windows-server-docs/security/tls/tls-schannel-ssp-changes-in-windows-10-and-windows-server-2016. Retrieved 2017-03-29.
80. ↑ Foley, Mary Jo. "Some Windows 10 Enterprise users won't get Microsoft's Edge browser". ZDNet. Archived from the original on 2017-03-20. https://web.archive.org/web/20170320184521/http://www.zdnet.com/article/some-windows-10-enterprise-users-wont-get-microsofts-edge-browser/.
81. ↑ "POODLE SSL vulnerability – secure your Windo… – Windows Phone 8 Development and Hacking". XDA Developers. Archived from the original on 2016-09-23. https://web.archive.org/web/20160923053812/http://forum.xda-developers.com/windows-phone-8/development/poodle-ssl-vulnerability-secure-windows-t2906203.
82. ↑ 82.0 82.1 "What TLS version is used in Windows Phone 8 for secure HTTP connections?". Microsoft. Archived from the original on 2016-03-04. https://web.archive.org/web/20160304063257/https://social.msdn.microsoft.com/Forums/windowsapps/en-US/2ddee177-5086-4453-987b-d02b6a7ec62d/what-tls-version-is-used-in-windows-phone-8-for-secure-http-connections?forum=wpdevelop. Retrieved 2014-11-07.
83. ↑ "Qualys SSL Labs – Projects / User Agent Capabilities: Unknown". Archived from the original on 2017-03-01. https://web.archive.org/web/20170301141459/https://www.ssllabs.com/ssltest/viewClient.html?name=IE Mobile&version=10&platform=Win Phone 8.0.
84. ↑ 84.0 84.1 "Platform Security". Microsoft. 2014-06-25. Archived from the original on 2017-03-13. https://web.archive.org/web/20170313125118/https://technet.microsoft.com/en-us/library/dn756283.aspx. Retrieved 2014-11-07.
85. ↑ "Release Notes: Important Issues in Windows 8.1 Preview". Microsoft. 2013-06-24. Archived from the original on 2014-11-04. https://web.archive.org/web/20141104071622/http://technet.microsoft.com/en-us/library/dn303404.aspx. Retrieved 2014-11-04.
86. ↑ "W8.1(IE11) vs RC4". Qualys Community. Archived from the original on 2014-11-04. https://web.archive.org/web/20141104093736/https://community.qualys.com/thread/12092. Retrieved 2014-11-04.
87. ↑ "Opera 9.0 for Windows Changelog". Archived from the original on 2012-09-10. https://archive.today/20120910/http://www.opera.com/docs/changelogs/windows/900/.
88. ↑ "Opera 2 series". Archived from the original on 2014-10-23. https://web.archive.org/web/20141023073434/http://www.opera.com/docs/history/presto/#o2. Retrieved 2014-09-20.
89. ↑ "Opera 3 series". Archived from the original on 2014-10-23. https://web.archive.org/web/20141023073434/http://www.opera.com/docs/history/presto/#o3. Retrieved 2014-09-20.
90. ↑ "Opera 4 series". Archived from the original on 2014-10-23. https://web.archive.org/web/20141023073434/http://www.opera.com/docs/history/presto/#o4. Retrieved 2014-09-20.
91. ↑ 91.0 91.1 "Changelog for Opera 5.x for Windows". Archived from the original on 2014-10-19. https://web.archive.org/web/20141019005943/http://www.opera.com/docs/changelogs/windows/500-512/. Retrieved 2014-06-19.
92. ↑ "Changelog for Opera [8 Beta 2 for Windows"]. Archived from the original on 2005-11-23. https://web.archive.org/web/20051123055608/http://opera.com/docs/changelogs/windows/800b2/. Retrieved 2014-06-19.
93. ↑ "Web Specifications Supported in Opera 9". Archived from the original on 2014-10-26. https://web.archive.org/web/20141026185804/http://www.opera.com/docs/specs/opera9/. Retrieved 2014-06-19.
94. ↑ 94.0 94.1 "Opera: Opera 10 beta for Windows changelog". Archived from the original on 2014-10-23. https://web.archive.org/web/20141023083043/http://www.opera.com/docs/changelogs/windows/1000b1/. Retrieved 2014-06-19.
95. ↑ "About Opera 11.60 and new problems with some secure servers". 2011-12-11. Archived on 2012-01-18. Error: If you specify `|archivedate=`, you must also specify `|archiveurl=`. http://my.opera.com/securitygroup/blog/2011/12/11/opera-11-60-and-new-problems-with-some-secure-servers.
96. ↑ 96.0 96.1 96.2 "Security changes in Opera 25; the poodle attacks". 2014-10-15. Archived from the original on 2014-10-20. https://web.archive.org/web/20141020091840/http://blogs.opera.com/security/2014/10/security-changes-opera-25-poodle-attacks/. Retrieved 2014-10-28.
97. ↑ 97.0 97.1 97.2 97.3 "Unjam the logjam". 2015-06-09. Archived from the original on 2015-06-14. https://web.archive.org/web/20150614005330/http://blogs.opera.com/security/2015/06/unjam-the-logjam/. Retrieved 2015-06-11.
98. ↑ "Advisory: RC4 encryption protocol is vulnerable to certain brute force attacks". 2013-04-04. Archived from the original on 2015-03-15. https://web.archive.org/web/20150315052403/http://www.opera.com/ja/security/advisory/1046. Retrieved 2014-11-14.
99. ↑ "On the Precariousness of RC4". 2013-03-20. Archived from the original on 2013-11-12. https://web.archive.org/web/20131112235240/http://my.opera.com/securitygroup/blog/2013/03/20/on-the-precariousness-of-rc4. Retrieved 2014-11-17.
100. ↑ 100.0 100.1 100.2 100.3 100.4 "Opera 12 and Opera Mail security update". 2016-02-16. Archived from the original on 2016-02-16. https://web.archive.org/web/20160216143015/http://www.opera.com/blogs/security/2016/02/opera-12-and-opera-mail-security-update/. Retrieved 2016-02-17.
101. ↑ "Dev.Opera — Opera 14 for Android Is Out!". 2013-05-21. Archived from the original on 2015-01-30. https://web.archive.org/web/20150130172538/https://dev.opera.com/blog/opera-14-for-android-is-out/. Retrieved 2014-09-23.
102. ↑ "Dev.Opera — Introducing Opera 15 for Computers, and a Fast Release Cycle". 2013-07-02. Archived from the original on 2014-09-02. https://web.archive.org/web/20140902081954/https://dev.opera.com/blog/introducing-opera-15-for-desktop-and-a-fast-release-cycle/. Retrieved 2014-09-23.
103. ↑ 103.0 103.1 same as Chrome 26–29
104. ↑ 104.0 104.1 same as Chrome 30 and later
105. ↑ 105.0 105.1 same as Chrome 33 and later
106. ↑ Adrian, Dimcev. "Common browsers/libraries/servers and the associated cipher suites implemented". TLS Cipher Suites Project. Archived from the original on 2013-04-17. https://www.webcitation.org/6FwL0CvUM?url=http://www.carbonwind.net/TLS_Cipher_Suites_Project/tls_ssl_cipher_suites_annex_a1_main.docx.
107. ↑ Apple (2009-06-10). "Features". Archived from the original on 2013-04-17. https://www.webcitation.org/6FwL0oLMO?url=http://www.apple.com/safari/features.html. Retrieved 2009-06-10.
108. ↑ "Curl: Patch to add TLS 1.1 and 1.2 support & replace deprecated functions in SecureTransport". Archived from the original on 2017-03-01. https://web.archive.org/web/20170301142904/https://curl.haxx.se/mail/lib-2012-08/0120.html.
109. ↑ Qualys SSL Report: google.co.uk  (simulation Safari 5.1.9 TLS 1.0)
110. ↑ "Apple Secures Mac OS X with Mavericks Release – eSecurity Planet". 2013-10-25. Archived from the original on 2014-07-08. https://web.archive.org/web/20140708195022/http://www.esecurityplanet.com/mac-os-security/apple-secures-mac-os-x-with-mavericks-release.html. Retrieved 2014-06-23.
111. ↑ Ristic, Ivan. "Is BEAST Still a Threat?". qualys.com. Archived from the original on 2014-10-12. https://web.archive.org/web/20141012121824/https://community.qualys.com/blogs/securitylabs/2013/09/10/is-beast-still-a-threat.
112. ↑ 112.0 112.1 Ristić, Ivan (2013-10-31). "Apple enabled BEAST mitigations in OS X 10.9 Mavericks". Archived from the original on 2013-11-07. https://web.archive.org/web/20131107045223/http://blog.ivanristic.com/2013/10/apple-enabled-beast-mitigations-in-mavericks.html. Retrieved 2013-11-07.
113. ↑ Ristić, Ivan (2014-02-26). "Apple finally releases patch for BEAST". Archived from the original on 2014-07-14. https://web.archive.org/web/20140714162556/https://community.qualys.com/thread/12496. Retrieved 2014-07-01.
114. ↑ "About Security Update 2014-005". Archived from the original on 2014-10-24. https://web.archive.org/web/20141024181953/https://support.apple.com/kb/HT6531.
115. ↑ "About the security content of iOS 8.1". Archived from the original on 2014-10-23. https://web.archive.org/web/20141023104948/http://support.apple.com/kb/HT6541.
116. ↑ 116.0 116.1 116.2 "About Security Update 2015-002". Archived from the original on 2015-03-16. https://web.archive.org/web/20150316081731/https://support.apple.com/en-us/HT204413. Retrieved 2015-03-09.
117. ↑ 117.0 117.1 "About the security content of OS X Mavericks v10.9". Archived from the original on 2014-07-04. https://web.archive.org/web/20140704220956/http://support.apple.com/kb/HT6011. Retrieved 2014-06-20.
118. ↑ "User Agent Capabilities: Safari 8 / OS X 10.10". Qualsys SSL Labs. Archived from the original on 2015-09-06. https://web.archive.org/web/20150906044018/https://www.ssllabs.com/ssltest/viewClient.html?name=Safari&version=8&platform=OS X 10.10. Retrieved 2015-03-07.
119. ↑ "About the security content of OS X Yosemite v10.10.4 and Security Update 2015-005". Archived from the original on 2015-07-02. https://web.archive.org/web/20150702202131/https://support.apple.com/en-us/HT204942. Retrieved 2015-07-03.
120. ↑ 120.0 120.1 "TLS 1.3 Support Coming with Safari 12.1". 2019-02-23. https://dev.iachieved.it/iachievedit/tls-1-3-support-coming-with-safari-12-1.
121. ↑ 121.0 121.1 121.2 Apple (2011-10-14). "Technical Note TN2287 – iOS 5 and TLS 1.2 Interoperability Issues". Archived from the original on 2011-09-07. https://web.archive.org/web/20110907013839/http://developer.apple.com/library/iOS/#technotes/tn2287/_index.html. Retrieved 2012-12-10.
122. ↑ Liebowitz, Matt (2011-10-13). "Apple issues huge software security patches". NBCNews.com. http://www.nbcnews.com/id/44896639. Retrieved 2012-12-10.
123. ↑ MWR Info Security (2012-04-16). "Adventures with iOS UIWebviews". Archived from the original on 2013-04-17. https://www.webcitation.org/6FwL2M2Mc?url=http://labs.mwrinfosecurity.com/blog/2012/04/16/adventures-with-ios-uiwebviews/. Retrieved 2012-12-10. , section "HTTPS (SSL/TLS)"
124. ↑ "Secure Transport Reference". Archived from the original on 2014-06-04. https://web.archive.org/web/20140604052511/https://developer.apple.com/library/Mac/documentation/Security/Reference/secureTransportRef/Reference/reference.html#//apple_ref/c/tdef/SSLProtocol. Retrieved 2014-06-23. `kSSLProtocol2` is deprecated in iOS
125. ↑ "iPhone 3.0: Mobile Safari Gets Enhanced Security Certificate Visualization". 2009-03-31. Archived on 2009-04-03. Error: If you specify `|archivedate=`, you must also specify `|archiveurl=`. http://www.theiphoneblog.com/2009/03/31/iphone-30-mobile-safari-enhanced-security-certificate-visualization/.
126. ↑ "Qualys SSL Labs – Projects / User Agent Capabilities: Safari 7 / iOS 7.1". Archived from the original on 2017-03-13. https://web.archive.org/web/20170313130545/https://www.ssllabs.com/ssltest/viewClient.html?name=Safari&version=7&platform=iOS 7.1.
127. ↑ schurtertom (2013-10-11). "SOAP Request fails randomly on one Server but works on another on iOS7". https://stackoverflow.com/q/19221568. Retrieved 2014-01-05.
128. ↑ "User Agent Capabilities: Safari 8 / iOS 8.1.2". Qualsys SSL Labs. Archived from the original on 2016-03-04. https://web.archive.org/web/20160304062526/https://www.ssllabs.com/ssltest/viewClient.html?name=Safari&version=8&platform=iOS 8.1.2. Retrieved 2015-03-07.
129. ↑ "About the security content of iOS 8.2". Archived from the original on 2015-03-09. https://web.archive.org/web/20150309201042/https://support.apple.com/en-us/HT204423. Retrieved 2015-03-09.
130. ↑ "About the security content of iOS 8.4". Archived from the original on 2015-07-03. https://web.archive.org/web/20150703014410/https://support.apple.com/en-us/HT204941. Retrieved 2015-07-03.
131. ↑ 131.0 131.1 Pauly, Tommy (2019-01-29). "TLS 1.3 in iOS". tls@ietf.org (Mailing list).
132. ↑ Oracle. "7093640: Enable client-side TLS 1.2 by default". https://bugs.openjdk.java.net/browse/JDK-7093640. Retrieved 2018-08-30.
133. ↑ Oracle. "JEP 332: Transport Layer Security (TLS) 1.3". https://bugs.openjdk.java.net/browse/JDK-8145252. Retrieved 2018-08-30.
134. ↑ "Version 1.11.13, 2015-01-11 — Botan". 2015-01-11. Archived from the original on 2015-01-09. https://web.archive.org/web/20150109154102/http://botan.randombit.net/relnotes/1_11_13.html. Retrieved 2015-01-16.
135. ↑ "[gnutls-devel GnuTLS 3.4.0 released"]. 2015-04-08. Archived from the original on 2015-04-16. https://web.archive.org/web/20150416005543/http://lists.gnutls.org/pipermail/gnutls-devel/2015-April/007535.html. Retrieved 2015-04-16.
136. ↑ "[gnutls-devel gnutls 3.6.3"]. 2018-07-16. https://lists.gnupg.org/pipermail/gnutls-devel/2018-July/008584.html. Retrieved 2018-09-16.
137. ↑ "Java™ SE Development Kit 8, Update 31 Release Notes". Archived from the original on 2015-01-21. https://web.archive.org/web/20150121105601/http://www.oracle.com/technetwork/java/javase/8u31-relnotes-2389094.html. Retrieved 2015-01-22.
138. ↑ "OpenBSD 5.6 Released". 2014-11-01. https://marc.info/?l=openbsd-announce&m=141486254309079&w=2. Retrieved 2015-01-20.
139. ↑ "LibreSSL 2.3.0 Released". 2015-09-23. https://marc.info/?l=openbsd-announce&m=144304330731220. Retrieved 2015-09-24.
140. ↑ "MatrixSSL – News". Archived from the original on 2015-02-14. https://web.archive.org/web/20150214105056/http://www.matrixssl.org/news.html. Retrieved 2014-11-09.
141. ↑ "mbed TLS 2.0.0 released". 2015-07-10. Archived from the original on 2015-09-25. https://web.archive.org/web/20150925030547/https://tls.mbed.org/tech-updates/releases/mbedtls-2.0.0-released. Retrieved 2015-07-14.
142. ↑ "NSS 3.19 release notes". Mozilla Developer Network. Mozilla. Archived from the original on 2015-06-05. https://web.archive.org/web/20150605054647/https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.19_release_notes. Retrieved 2015-05-06.
143. ↑ "NSS 3.14 release notes". Mozilla Developer Network. Mozilla. Archived from the original on 2013-01-17. https://web.archive.org/web/20130117130029/https://developer.mozilla.org/en-US/docs/NSS/NSS_3.14_release_notes. Retrieved 2012-10-27.
144. ↑ "NSS 3.15.1 release notes". Mozilla Developer Network. Mozilla. Archived from the original on 2013-09-22. https://web.archive.org/web/20130922223238/https://developer.mozilla.org/en-US/docs/NSS/NSS_3.15.1_release_notes. Retrieved 2013-08-10.
145. ↑ "NSS 3.39 release notes". 2018-08-31. https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.39_release_notes#Notable_Changes_in_NSS_3.39. Retrieved 2018-09-14.
146. ↑ "OpenSSL 1.1.0 Series Release Notes". Archived from the original on 2016-08-25. https://web.archive.org/web/20160825171308/https://www.openssl.org/news/openssl-1.1.0-notes.html. Retrieved 2016-10-02.
147. ↑ 147.0 147.1 "Major changes between OpenSSL 1.0.0h and OpenSSL 1.0.1 [14 Mar 2012"]. 2012-03-14. Archived from the original on January 20, 2015. https://web.archive.org/web/20150120120428/https://www.openssl.org/news/openssl-1.0.1-notes.html. Retrieved 2015-01-20.
148. ↑ "OpenSSL 1.1.1 Is Released". 2018-09-11. https://www.openssl.org/blog/blog/2018/09/11/release111/. Retrieved 2018-09-14.
149. ↑ "RSA BSAFE Technical Specification Comparison Tables". Archived from the original on 2015-09-24. https://web.archive.org/web/20150924043531/http://www.emc.com/collateral/data-sheet/11433-bsafe-tech-table.pdf.
150. ↑ TLS cipher suites in Microsoft Windows XP and 2003
151. ↑ 151.0 151.1 SChannel Cipher Suites in Microsoft Windows Vista
152. ↑ 152.0 152.1 152.2 TLS Cipher Suites in SChannel for Windows 7, 2008R2, 8, 2012
153. ↑ "[wolfssl wolfSSL 3.6.6 Released"]. 2015-08-20. Archived from the original on 2015-10-17. https://web.archive.org/web/20151017033726/https://wolfssl.com/wolfSSL/Blog/Entries/2015/8/24_wolfSSL_3.6.6_is_Now_Available.html. Retrieved 2015-08-25.
154. ↑ "[wolfssl wolfSSL TLS1.3 support"]. 2017-02-13. https://github.com/wolfSSL/wolfssl/pull/661. Retrieved 2017-02-13.
155. ↑ "NSS 3.24 release notes". Mozilla Developer Network. Mozilla. Archived from the original on 2016-08-26. https://web.archive.org/web/20160826100711/https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.24_release_notes. Retrieved 2016-06-19.
156. ↑ "Technical Note TN2287: iOS 5 and TLS 1.2 Interoperability Issues". iOS Developer Library. Apple Inc.. Archived from the original on 2015-04-03. https://web.archive.org/web/20150403092122/https://developer.apple.com/library/ios/technotes/tn2287/. Retrieved 2012-05-03.
157. ↑ Qualys SSL Labs – Projects / User Agent Capabilities
158. ↑ Georgiev, Martin and Iyengar, Subodh and Jana, Suman and Anubhai, Rishita and Boneh, Dan and Shmatikov, Vitaly (2012). The most dangerous code in the world: validating SSL certificates in non-browser software. Proceedings of the 2012 ACM conference on Computer and communications security. pp. 38–49. ISBN 978-1-4503-1651-4. http://www.cs.utexas.edu/~shmat/shmat_ccs12.pdf.

This article is based on material taken from the Free On-line Dictionary of Computing prior to 1 November 2008 and incorporated under the "relicensing" terms of the GFDL, version 1.3 or later.

0.00

(0 votes)

|

Retrieved from "https://handwiki.org/wiki/index.php?title=Transport_Layer_Security_Adoption&oldid=228725"