The 'IoT' in Microsoft IoT Hub means Internet of Trying-to-kill-off-whiffy-crypto-protocol: TLS 1.0/1.1 spared axe again

Microsoft has indefinitely postponed the deprecation of Transport Level Security (TLS) 1.0 and 1.1 in its IoT Hub. Redmond had previously threatened to kill the outdated protocol off on 1 July 2020, and a similar fate for the tech in its Device Provisioning Service (DPS) before realising that DPS didn't actually support it …

[John Crisp]

And the rest

Shame they don't shitcan stuff like pptp & l2tp/ipsec v1 and upgrade their encryption levels for ipsec v2 to something that governments can't spy on.

Hey ho.

[Sandtitz]

Re: And the rest @John Crisp

"Shame they don't shitcan stuff like pptp & l2tp/ipsec v1 and upgrade their encryption levels for ipsec v2 to something that governments can't spy on."

It is better to remain silent and be thought a fool, than to open your mouth and remove all doubt.

IKEv2 has been there since Windows 7. Windows offers a perfectly fine combination of encryption, key exchange and hash functions for VPNs or IPsec connections.

Yes, PPTP is useless, but please explain how L2TP/IPsec is shitcan stuff? Which vendor has dropped support for that?

[Pascal Monett]

"Microsoft has indefinitely postponed"

Of course. We can all trust Microsoft to uphold the least secure protocols of Internet history for as long as possible. Customer feedback ? Please. We all know that that is simply code for Redmond has decided.

I mean, Internet Explorer is still on the radar.

What more proof do you need ?

[big_D]

Google, Mozilla and Apple

have also canned plans to drop TLS 1.0 and 1.1 in Chrome/Firefox/Safari due to the Corona Virus.