IETF announces deprecation of TLS 1.0 and TLS 1.1
The Internet Engineering Task Force (IETF) has updated the recommendations for using the TLS crypto protocol, officially writing off versions 1.0 and 1.1 as obsolete.
The TLS 1.0 specification was published in January 1999 and seven years later the IETF updated it to approve TLS 1.1. Since then, requirements for data transmission reliability have increased. Since 2008, the use of TLS version 1.2 has been recommended in the most critical areas of economic acitivity, but this standard has also been updated - three years ago, TLS 1.3 was approved, which can provide greater security.
A new document from the IETF finally abolishes TLS 1.0 and 1.1, declaring them not up-to-date. In applications intended for use in the public sector and industry, it is recommended to remove support for these protocols. DTLS 1.0 has also been deprecated; it is recommended to use DTLS 1.2 instead (version 1.1 was not deprecated).
TLS 1.0 / 1.1 support is currently disabled in major browsers; it is also being phased out from other applications and services.
Source: anti-malware.ru
27 March 2021