locked
TLS 1.0 and PCI Compliance RRS feed

  • Question

  • I'm a web developer specializing in e-commerce so I deal a lot with PCI compliance. This year, compliance includes disabling TLS 1.0 due to insecurities, which in and of itself is fine (actually, preferred). However, by default, Microsoft DISABLES TLS 1.1 and 1.2 in IE 9 and 10. It's there, but disabled.

    There is no easy solution on server side to determine if a browser has TLS 1.1+ enabled. The fix on the client end is simple, but we know that users shouldn't need to know how.

    The resolution to this issue is relatively simple - please release an update that enables TLS 1.1 and 1.2 in IE 9 and 10! This would allow those of us dealing with PCI and HIPAA compliance to disable TLS 1.0 as recommended.
    Monday, June 8, 2015 7:10 PM

Answers

  • The TLS 1.1 and 1.2 not enabled by default and should be enabled via registry. This may be a by design issue.

    It would suggest you submit a feedback to microsoft IE connect.

    http://connect.microsoft.com/ie/


    We are trying to better understand customer views on social support experience, so your participation in this interview project would be greatly appreciated if you have time. Thanks for helping make community forums a great place.
    Click HERE to participate the survey.


    • Edited by Shu 2017 Tuesday, June 9, 2015 10:13 AM
    • Marked as answer by Angie Xu Tuesday, June 30, 2015 6:26 AM
    Tuesday, June 9, 2015 10:11 AM

All replies

  • The TLS 1.1 and 1.2 not enabled by default and should be enabled via registry. This may be a by design issue.

    It would suggest you submit a feedback to microsoft IE connect.

    http://connect.microsoft.com/ie/


    We are trying to better understand customer views on social support experience, so your participation in this interview project would be greatly appreciated if you have time. Thanks for helping make community forums a great place.
    Click HERE to participate the survey.


    • Edited by Shu 2017 Tuesday, June 9, 2015 10:13 AM
    • Marked as answer by Angie Xu Tuesday, June 30, 2015 6:26 AM
    Tuesday, June 9, 2015 10:11 AM
  • Thank you for the suggestion and I will post there.
    Thursday, June 11, 2015 5:39 PM