It's time to upgrade to TLS 1.3 already, says CDN engineer

https://www.helpnetsecurity.com/2017/07/03/tls-security/

 

World celebrates, cyber-snoops cry as TLS 1.3 internet crypto approved

https://www.theregister.co.uk/2018/03/23/tls_1_3_approved_ietf/

 

That's good, last minute concerns about networking nightmares represent the infiltrators that have in the past conspired to weaken and subvert internet security one of the ways they do that is by claiming quite falsely that upgrades will break the internet, when in fact all it takes is a software update. I would hope the honest members of IETF were aware of that and did not allow them to get their way this time.

 

Deprecating TLS 1.0 and TLS 1.1 … kill them now!
June 19, 2018
https://securityaffairs.co/wordpress/73678/security/tls-10-1-1-deprecation.html

 

PayPal reminds users: TLS 1.2 and HTTP/1.1 are no longer optional
Insecure connections will break after June 30th. And it's acquired Hyperwallet, too
June 20, 2018
https://www.theregister.co.uk/2018/06/20/paypal_security_upgrade/

 

The PayPal test:

https://tlstest.paypal.com/

Even with IE8 it is OK.

 

Appear the test is either bogus or Paypal is still accepting TLS 1.1 and 1.2 connections. I am using IE11 and the max. TLS level supported by it is 1.2.

Thought the test was for TLS 1.3.

 

It would be interesting to PayPal test with a non TLS 1.2 browser.

 

Preparing for Transport Layer Security 1.3
The long-awaited encryption standard update is almost here. Get ready while you can to ensure security, interoperability, and performance.
July 2, 2018
https://www.darkreading.com/endpoint/preparing-for-transport-layer-security-13-/a/d-id/1332163

 

With Firefox,Basilisk and I.E.8 it is easy to remove the Insecure Cipher Suites.
I can't do it with Chrome:



Did someone make it?

 

Facebook open sources library to enhance latest Transport Layer Security protocol
August 06, 2018
https://techcrunch.com/2018/08/06/f...-up-latest-transport-layer-security-protocol/

 

https://www.ghacks.net/2018/08/14/tls-1-3-final-published/

 

I'm an xp sp3 user. How do I update my machine to this new standard TLS 1.3?

 

I use xp sp 3 and this browser is Firefox 6.0 in Paypal test page.

This is what I get

 

Update your browser:

1) Firefox ESR 52.9.0

2) about:config

security.tls.version.max set to 4

3) KB4019276 adds TLS 1.2 support to Windows XP POS READY2009.

TLS 1.3 support is not yet available for the OS POSReady 2009.

We confirm that Microsoft engineers are working on it.

 

1) No version of Firefox supports Windows XP that also supports TLS 1.3
2) Firefox uses it's own implementation of TLS, not Windows, lol.
Even if your "POSReady" does get TLS 1.3 (which I can basically guarantee it won't because mainstream support for every version of POSReady has ended) that won't make Firefox work. You'd have to use IE.

Firefox 52 ESR ends in 3 weeks.

 

After 3 weeks XP users will be able to use both Basilisk fork for XP and New Moon.

https://forum.palemoon.org/viewtopic.php?t=19881


Read MaryRose answers, from Microsoft support, to FranceBB:

https://msfn.org/board/topic/177693-tls13-xp-and-firefox/

 

Neither Pale Moon nor Basilisk support XP.
If you're relying on trusting unofficial forks then you should just go on random websites and start downloading and running random .exe files.

LOL. Wow, you're right. A random support staff from web chat said it, so it must be true.

Good luck buddy.

 

I run Windows XP sp3 32 bit
I have a Firefox Portable 52.4.0 which I tried with the settings below.
FirefoxPortableESR_52.4.0_English.paf.exe
I read on https://msfn.org/board/topic/177693-tls13-xp-and-firefox/
that I could enter about:config in my browser and change
security.tls.version.max setting from "3" to "4" in about:config
Although it didn't work for the person on the forum, it seems to have worked for me
As now I can go to the test sites like https://www.ssllabs.com/ssltest/analyze.html?d=tls13.cloudflare.com
and the paypal TLS 1.3 test site https://tlstest.paypal.com/ and get the green light A1 passes or an accept rather than a decline.
I think that he very last version of Firefox that you can get is Firefox Portable 52.9.0 for XP FirefoxPortableLegacy52_52.9.0_English.paf.exe

As I said it seems to work but I don't know much about these things.

 

Thanks Ron.
See also:
OpenSSL 1.1.1 Is Released
https://www.openssl.org/blog/blog/2018/09/11/release111/

Lots of info there.
Just these quotes:

 

TLS 1.3 updates from Chrome
October 12, 2018
https://www.ietf.org/mail-archive/web/tls/current/msg27066.html