Microsoft spares TLS 1.0 in Azure DevOps Services after customer backlash, Cosmos DB makes good on blurtage

Cosmos DB has rolled out a free tier, staffers get their mitts on stable Edge, and Azure DevOps Services steps back from axing TLS 1.0. For now. Yes, it's the weekly roundup of all things Microsoft we haven't already covered. TLS 1.0/1.1 in Azure DevOps Services granted a stay of execution Sometimes Microsoft will listen to …

[RM Myers]

Though it pains ... classy move by Microsoft...

I personally feel this is a classy comment by El Reg. Call them as you see them - good, bad, or indifferent. that's why I read your site.

That and the snark!

[teebie]

Citing "early feedback from some customers," Redmond has said the deprecation is off for the time being.

The feedback being "we are devops, we don't do security, stop trying to make us improve ourselves"

[big_D]

Anyone who is still using TLS 1.0 or TLS 1.1 on the Internet without parental guidance, erm anything using TLS 1.0 shouldn't be let within a hundred miles of the Internet! It is known insecure and fixed through newer versions. TLS 1.1 isn't much better.

[Anonymous Coward]

People have had plenty of warning about TLS 1.0/1.1. If it's just a small percentage, I say turn it off.

What's next? Are the going to complain to Apple that people can't get to their web sites from their iDevice when it demands their certificates have shorter lifespans and forced to use more up to date encryption?

https://www.theregister.co.uk/2020/02/20/apple_shorter_cert_lifetime/

[JakeMS]

TLSv1.0?

Someone still uses this? Does that same person still use SSLv1/3?

Seriously just turn it off. Last year dropped TLSv1.0 and v1.1 leaving just v1.2 running.

This year we enabled TLSv1.3, as such everything is either TLSv1.2 or v1.3.

Good news is, cutting everything pre-TLSv1.2 cut a huge chunk of spam via email.

[Claptrap314]

Classy-ish move

Of course, the PR drones are going to make this a huge benevolence move. The reality is that if these workers are put out of jobs, they will find something else to do. And when m$ decides that people have to come in to work---whoops!

So, while they are probably paying a bit more, they are also managing smartly for the situation at hand.