[Website announcement] HKCERT website will only support more secure TLS versions from April 1, 2020 onwards

Release Date: 17 Feb 2020 7924 Views

To strengthen the security of HKCERT website, we will only support more secure versions of Transport Layer Security (TLS) protocol TLS 1.2 and TLS 1.3, and stop supporting TLS 1.0 and TLS 1.1 from April 1, 2020 onwards.

TLS 1.0 (published in 1999) and TLS 1.1 (published in 2006) are deemed not sufficiently secure according to the current cyber security standard. Attackers are able to exploit their weaknesses to decrypt the transmitted data. These two versions are to be deprecated by technology providers. For example, major browsers like Chrome and Firefox will stop supporting TLS 1.0 and TLS 1.1 in March 2020. Users should use the most updated browsers when possible.

HKCERT website still supports TLS 1.0 & TLS 1.1 until 31 March, 2020.

What is the impact?
From April 1, 2020, affected parties will not be able to browse the HKCERT website.

Who are affected?
Users whose browsers do not support TLS 1.2 or TLS 1.3 by default.

Browser versions does not support TLS 1.2 by default

Chrome versions earlier than 38
Firefox versions earlier than 27
Internet Explorer versions earlier than 11 (Microsoft Windows 7)
Safari (Mac OS) versions earlier than 7
Android versions earlier than 5.0
iOS versions earlier than 5.0

What can user do if they are affected?
If you are using an older version browser, please upgrade it to the latest version.

References
1. Announcement from major browser vendors