# Version history for TLS/SSL support in web browsers

Version history for TLS/SSL support in web browsers tracks the implementation of Transport Layer Security protocol versions in major web browsers.
TLS/SSL support history of web browsers :
| Browser or OS API | Version | Version | Platforms | SSL protocols | SSL protocols | TLS protocols | TLS protocols | TLS protocols | TLS protocols | Certificate support | Certificate support | Certificate support | Vulnerability | Vulnerability | Vulnerability | Vulnerability | Vulnerability | Vulnerability | Protocol selection by user |
| Browser or OS API | Version | Version | Platforms | SSL 2.0 (insecure) | SSL 3.0 (insecure) | TLS 1.0 (deprecated) | TLS 1.1 (deprecated) | TLS 1.2 | TLS 1.3 | EV | SHA-2 | ECDSA | BEAST | CRIME | POODLE (SSLv3) | RC4 | FREAK | Logjam | Protocol selection by user |
| Google Chrome (Chrome for Android) | 1–9 | 1–9 | Windows (10+) macOS (11+) Linux Android (8.0+) iOS (16+) ChromeOS | Disabled by default | Yes | Yes | No | No | No | Yes (only desktop) | Requires SHA-2 compatible OS | Needs ECC compatible OS | Not affected | Vulnerable (HTTPS) | Vulnerable | Vulnerable | Vulnerable (except Windows) | Vulnerable | Yes |
| Google Chrome (Chrome for Android) | 10–20 | 10–20 | Windows (10+) macOS (11+) Linux Android (8.0+) iOS (16+) ChromeOS | No | Yes | Yes | No | No | No | Yes (only desktop) | Requires SHA-2 compatible OS | Needs ECC compatible OS | Not affected | Vulnerable (HTTPS/SPDY) | Vulnerable | Vulnerable | Vulnerable (except Windows) | Vulnerable | Yes |
| Google Chrome (Chrome for Android) | 21 | 21 | Windows (10+) macOS (11+) Linux Android (8.0+) iOS (16+) ChromeOS | No | Yes | Yes | No | No | No | Yes (only desktop) | Requires SHA-2 compatible OS | Needs ECC compatible OS | Not affected | Mitigated | Vulnerable | Vulnerable | Vulnerable (except Windows) | Vulnerable | Yes |
| Google Chrome (Chrome for Android) | 22–29 | 22–29 | Windows (10+) macOS (11+) Linux Android (8.0+) iOS (16+) ChromeOS | No | Yes | Yes | Yes | No | No | Yes (only desktop) | Requires SHA-2 compatible OS | Needs ECC compatible OS | Not affected | Mitigated | Vulnerable | Vulnerable | Vulnerable (except Windows) | Vulnerable | Temporary |
| Google Chrome (Chrome for Android) | 30–32 | 30–32 | Windows (10+) macOS (11+) Linux Android (8.0+) iOS (16+) ChromeOS | No | Yes | Yes | Yes | Yes | No | Yes (only desktop) | Requires SHA-2 compatible OS | Needs ECC compatible OS | Not affected | Mitigated | Vulnerable | Vulnerable | Vulnerable (except Windows) | Vulnerable | Temporary |
| Google Chrome (Chrome for Android) | 33–37 | 33–37 | Windows (10+) macOS (11+) Linux Android (8.0+) iOS (16+) ChromeOS | No | Yes | Yes | Yes | Yes | No | Yes (only desktop) | Requires SHA-2 compatible OS | Needs ECC compatible OS | Not affected | Mitigated | Partly mitigated | Lowest priority | Vulnerable (except Windows) | Vulnerable | Temporary |
| Google Chrome (Chrome for Android) | 38, 39 | 38, 39 | Windows (10+) macOS (11+) Linux Android (8.0+) iOS (16+) ChromeOS | No | Yes | Yes | Yes | Yes | No | Yes (only desktop) | Yes | Needs ECC compatible OS | Not affected | Mitigated | Partly mitigated | Lowest priority | Vulnerable (except Windows) | Vulnerable | Temporary |
| Google Chrome (Chrome for Android) | 40 | 40 | Windows (10+) macOS (11+) Linux Android (8.0+) iOS (16+) ChromeOS | No | Disabled by default | Yes | Yes | Yes | No | Yes (only desktop) | Yes | Needs ECC compatible OS | Not affected | Mitigated | Mitigated | Lowest priority | Vulnerable (except Windows) | Vulnerable | Yes |
| Google Chrome (Chrome for Android) | 41, 42 | 41, 42 | Windows (10+) macOS (11+) Linux Android (8.0+) iOS (16+) ChromeOS | No | Disabled by default | Yes | Yes | Yes | No | Yes (only desktop) | Yes | Needs ECC compatible OS | Not affected | Mitigated | Mitigated | Lowest priority | Mitigated | Vulnerable | Yes |
| Google Chrome (Chrome for Android) | 43 | 43 | Windows (10+) macOS (11+) Linux Android (8.0+) iOS (16+) ChromeOS | No | Disabled by default | Yes | Yes | Yes | No | Yes (only desktop) | Yes | Needs ECC compatible OS | Not affected | Mitigated | Mitigated | Only as fallback | Mitigated | Vulnerable | Yes |
| Google Chrome (Chrome for Android) | 44–47 | 44–47 | Windows (10+) macOS (11+) Linux Android (8.0+) iOS (16+) ChromeOS | No | No | Yes | Yes | Yes | No | Yes (only desktop) | Yes | Needs ECC compatible OS | Not affected | Mitigated | Not affected | Only as fallback | Mitigated | Mitigated | Temporary |
| Google Chrome (Chrome for Android) | 48, 49 | 48, 49 | Windows (10+) macOS (11+) Linux Android (8.0+) iOS (16+) ChromeOS | No | No | Yes | Yes | Yes | No | Yes (only desktop) | Yes | Needs ECC compatible OS | Not affected | Mitigated | Not affected | Disabled by default | Mitigated | Mitigated | Temporary |
| Google Chrome (Chrome for Android) | 50–53 | 50–53 | Windows (10+) macOS (11+) Linux Android (8.0+) iOS (16+) ChromeOS | No | No | Yes | Yes | Yes | No | Yes (only desktop) | Yes | Yes | Not affected | Mitigated | Not affected | Disabled by default | Mitigated | Mitigated | Temporary |
| Google Chrome (Chrome for Android) | 54–66 | 54–66 | Windows (10+) macOS (11+) Linux Android (8.0+) iOS (16+) ChromeOS | No | No | Yes | Yes | Yes | Disabled by default (draft version) | Yes (only desktop) | Yes | Yes | Not affected | Mitigated | Not affected | Disabled by default | Mitigated | Mitigated | Temporary |
| Google Chrome (Chrome for Android) | 67–69 | 67–69 | Windows (10+) macOS (11+) Linux Android (8.0+) iOS (16+) ChromeOS | No | No | Yes | Yes | Yes | Yes (draft version) | Yes (only desktop) | Yes | Yes | Not affected | Mitigated | Not affected | Disabled by default | Mitigated | Mitigated | Temporary |
| Google Chrome (Chrome for Android) | 70–83 | 70–83 | Windows (10+) macOS (11+) Linux Android (8.0+) iOS (16+) ChromeOS | No | No | Yes | Yes | Yes | Yes | Yes (only desktop) | Yes | Yes | Not affected | Mitigated | Not affected | Disabled by default | Mitigated | Mitigated | Temporary |
| Google Chrome (Chrome for Android) | 84–90 | 84–90 | Windows (10+) macOS (11+) Linux Android (8.0+) iOS (16+) ChromeOS | No | No | Warn by default | Warn by default | Yes | Yes | Yes (only desktop) | Yes | Yes | Not affected | Mitigated | Not affected | Disabled by default | Mitigated | Mitigated | Temporary |
| Google Chrome (Chrome for Android) | 91–133 | 91–133 | Windows (10+) macOS (11+) Linux Android (8.0+) iOS (16+) ChromeOS | No | No | No | No | Yes | Yes | Yes (only desktop) | Yes | Yes | Not affected | Mitigated | Not affected | Disabled by default | Mitigated | Mitigated | Temporary |
| Google Chrome (Chrome for Android) | ESC 134 | 134 | Windows (10+) macOS (11+) Linux Android (8.0+) iOS (16+) ChromeOS | No | No | No | No | Yes | Yes | Yes (only desktop) | Yes | Yes | Not affected | Mitigated | Not affected | Disabled by default | Mitigated | Mitigated | Temporary |
| Browser or OS API | Version | Version | Platforms | SSL 2.0 (insecure) | SSL 3.0 (insecure) | TLS 1.0 (deprecated) | TLS 1.1 (deprecated) | TLS 1.2 | TLS 1.3 | EV certificate | SHA-2 certificate | ECDSA certificate | BEAST | CRIME | POODLE (SSLv3) | RC4 | FREAK | Logjam | Protocol selection by user |
| Microsoft Edge (Chromium-based) OS-independent | 79–83 | 79–83 | Windows (10+) macOS (11+) Linux Android (8.0+) iOS (16+) | No | No | Yes | Yes | Yes | Yes | Yes | Yes | Yes | Mitigated | Not affected | Not affected | Disabled by default | Mitigated | Mitigated | Yes |
| Microsoft Edge (Chromium-based) OS-independent | 84–90 | 84–90 | Windows (10+) macOS (11+) Linux Android (8.0+) iOS (16+) | No | No | Warn by default | Warn by default | Yes | Yes | Yes | Yes | Yes | Mitigated | Not affected | Not affected | Disabled by default | Mitigated | Mitigated | Yes |
| Microsoft Edge (Chromium-based) OS-independent | 91-133 | 91-133 | Windows (10+) macOS (11+) Linux Android (8.0+) iOS (16+) | No | No | No | No | Yes | Yes | Yes | Yes | Yes | Mitigated | Not affected | Not affected | Disabled by default | Mitigated | Mitigated | Yes |
| Microsoft Edge (Chromium-based) OS-independent | ESC 134 | 134 | Windows (10+) macOS (11+) Linux Android (8.0+) iOS (16+) | No | No | No | No | Yes | Yes | Yes | Yes | Yes | Mitigated | Not affected | Not affected | Disabled by default | Mitigated | Mitigated | Yes |
| Browser or OS API | Version | Version | Platforms | SSL 2.0 (insecure) | SSL 3.0 (insecure) | TLS 1.0 (deprecated) | TLS 1.1 (deprecated) | TLS 1.2 | TLS 1.3 | EV certificate | SHA-2 certificate | ECDSA certificate | BEAST | CRIME | POODLE (SSLv3) | RC4 | FREAK | Logjam | Protocol selection by user |
| Mozilla Firefox (Firefox for mobile) | 1.0, 1.5 | 1.0, 1.5 | Windows (10+) macOS (10.15+) Linux Android (5.0+) iOS (15+) Firefox OS Maemo ESR 115 only for: Windows (7–8.1) macOS (10.12–10.14) ESR 128+ only for: Windows (10+) macOS (10.15+) Linux | Yes | Yes | Yes | No | No | No | No | Yes | No | Not affected | Not affected | Vulnerable | Vulnerable | Not affected | Vulnerable | Yes |
| Mozilla Firefox (Firefox for mobile) | 2 | 2 | Windows (10+) macOS (10.15+) Linux Android (5.0+) iOS (15+) Firefox OS Maemo ESR 115 only for: Windows (7–8.1) macOS (10.12–10.14) ESR 128+ only for: Windows (10+) macOS (10.15+) Linux | Disabled by default | Yes | Yes | No | No | No | No | Yes | Yes | Not affected | Not affected | Vulnerable | Vulnerable | Not affected | Vulnerable | Yes |
| Mozilla Firefox (Firefox for mobile) | 3–7 | 3–7 | Windows (10+) macOS (10.15+) Linux Android (5.0+) iOS (15+) Firefox OS Maemo ESR 115 only for: Windows (7–8.1) macOS (10.12–10.14) ESR 128+ only for: Windows (10+) macOS (10.15+) Linux | Disabled by default | Yes | Yes | No | No | No | Yes | Yes | Yes | Not affected | Not affected | Vulnerable | Vulnerable | Not affected | Vulnerable | Yes |
| Mozilla Firefox (Firefox for mobile) | 8–10 ESR 10 | 8–10 ESR 10 | Windows (10+) macOS (10.15+) Linux Android (5.0+) iOS (15+) Firefox OS Maemo ESR 115 only for: Windows (7–8.1) macOS (10.12–10.14) ESR 128+ only for: Windows (10+) macOS (10.15+) Linux | No | Yes | Yes | No | No | No | Yes | Yes | Yes | Not affected | Not affected | Vulnerable | Vulnerable | Not affected | Vulnerable | Yes |
| Mozilla Firefox (Firefox for mobile) | 11–14 | 11–14 | Windows (10+) macOS (10.15+) Linux Android (5.0+) iOS (15+) Firefox OS Maemo ESR 115 only for: Windows (7–8.1) macOS (10.12–10.14) ESR 128+ only for: Windows (10+) macOS (10.15+) Linux | No | Yes | Yes | No | No | No | Yes | Yes | Yes | Not affected | Vulnerable (SPDY) | Vulnerable | Vulnerable | Not affected | Vulnerable | Yes |
| Mozilla Firefox (Firefox for mobile) | 15–22 ESR 17.0–17.0.10 | 15–22 ESR 17.0–17.0.10 | Windows (10+) macOS (10.15+) Linux Android (5.0+) iOS (15+) Firefox OS Maemo ESR 115 only for: Windows (7–8.1) macOS (10.12–10.14) ESR 128+ only for: Windows (10+) macOS (10.15+) Linux | No | Yes | Yes | No | No | No | Yes | Yes | Yes | Not affected | Mitigated | Vulnerable | Vulnerable | Not affected | Vulnerable | Yes |
| Mozilla Firefox (Firefox for mobile) | ESR 17.0.11 | ESR 17.0.11 | Windows (10+) macOS (10.15+) Linux Android (5.0+) iOS (15+) Firefox OS Maemo ESR 115 only for: Windows (7–8.1) macOS (10.12–10.14) ESR 128+ only for: Windows (10+) macOS (10.15+) Linux | No | Yes | Yes | No | No | No | Yes | Yes | Yes | Not affected | Mitigated | Vulnerable | Lowest priority | Not affected | Vulnerable | Yes |
| Mozilla Firefox (Firefox for mobile) | 23 | 23 | Windows (10+) macOS (10.15+) Linux Android (5.0+) iOS (15+) Firefox OS Maemo ESR 115 only for: Windows (7–8.1) macOS (10.12–10.14) ESR 128+ only for: Windows (10+) macOS (10.15+) Linux | No | Yes | Yes | Disabled by default | No | No | Yes | Yes | Yes | Not affected | Mitigated | Vulnerable | Vulnerable | Not affected | Vulnerable | Yes |
| Mozilla Firefox (Firefox for mobile) | 24, 25.0.0 ESR 24.0–24.1.0 | 24, 25.0.0 ESR 24.0–24.1.0 | Windows (10+) macOS (10.15+) Linux Android (5.0+) iOS (15+) Firefox OS Maemo ESR 115 only for: Windows (7–8.1) macOS (10.12–10.14) ESR 128+ only for: Windows (10+) macOS (10.15+) Linux | No | Yes | Yes | Disabled by default | Disabled by default | No | Yes | Yes | Yes | Not affected | Mitigated | Vulnerable | Vulnerable | Not affected | Vulnerable | Yes |
| Mozilla Firefox (Firefox for mobile) | 25.0.1, 26 ESR 24.1.1–24.8.1 | 25.0.1, 26 ESR 24.1.1–24.8.1 | Windows (10+) macOS (10.15+) Linux Android (5.0+) iOS (15+) Firefox OS Maemo ESR 115 only for: Windows (7–8.1) macOS (10.12–10.14) ESR 128+ only for: Windows (10+) macOS (10.15+) Linux | No | Yes | Yes | Disabled by default | Disabled by default | No | Yes | Yes | Yes | Not affected | Mitigated | Vulnerable | Lowest priority | Not affected | Vulnerable | Yes |
| Mozilla Firefox (Firefox for mobile) | 27–33 ESR 31.0–31.2.0 | 27–33 ESR 31.0–31.2.0 | Windows (10+) macOS (10.15+) Linux Android (5.0+) iOS (15+) Firefox OS Maemo ESR 115 only for: Windows (7–8.1) macOS (10.12–10.14) ESR 128+ only for: Windows (10+) macOS (10.15+) Linux | No | Yes | Yes | Yes | Yes | No | Yes | Yes | Yes | Not affected | Mitigated | Vulnerable | Lowest priority | Not affected | Vulnerable | Yes |
| Mozilla Firefox (Firefox for mobile) | 34, 35 ESR 31.3.0–31.7.0 | 34, 35 ESR 31.3.0–31.7.0 | Windows (10+) macOS (10.15+) Linux Android (5.0+) iOS (15+) Firefox OS Maemo ESR 115 only for: Windows (7–8.1) macOS (10.12–10.14) ESR 128+ only for: Windows (10+) macOS (10.15+) Linux | No | Disabled by default | Yes | Yes | Yes | No | Yes | Yes | Yes | Not affected | Mitigated | Mitigated | Lowest priority | Not affected | Vulnerable | Yes |
| Mozilla Firefox (Firefox for mobile) | ESR 31.8.0 | ESR 31.8.0 | Windows (10+) macOS (10.15+) Linux Android (5.0+) iOS (15+) Firefox OS Maemo ESR 115 only for: Windows (7–8.1) macOS (10.12–10.14) ESR 128+ only for: Windows (10+) macOS (10.15+) Linux | No | Disabled by default | Yes | Yes | Yes | No | Yes | Yes | Yes | Not affected | Mitigated | Mitigated | Lowest priority | Not affected | Mitigated | Yes |
| Mozilla Firefox (Firefox for mobile) | 36–38 ESR 38.0–38.0.1 | 36–38 ESR 38.0–38.0.1 | Windows (10+) macOS (10.15+) Linux Android (5.0+) iOS (15+) Firefox OS Maemo ESR 115 only for: Windows (7–8.1) macOS (10.12–10.14) ESR 128+ only for: Windows (10+) macOS (10.15+) Linux | No | Disabled by default | Yes | Yes | Yes | No | Yes | Yes | Yes | Not affected | Mitigated | Mitigated | Only as fallback | Not affected | Vulnerable | Yes |
| Mozilla Firefox (Firefox for mobile) | ESR 38.1.0–38.8.0 | ESR 38.1.0–38.8.0 | Windows (10+) macOS (10.15+) Linux Android (5.0+) iOS (15+) Firefox OS Maemo ESR 115 only for: Windows (7–8.1) macOS (10.12–10.14) ESR 128+ only for: Windows (10+) macOS (10.15+) Linux | No | Disabled by default | Yes | Yes | Yes | No | Yes | Yes | Yes | Not affected | Mitigated | Mitigated | Only as fallback | Not affected | Mitigated | Yes |
| Mozilla Firefox (Firefox for mobile) | 39–43 | 39–43 | Windows (10+) macOS (10.15+) Linux Android (5.0+) iOS (15+) Firefox OS Maemo ESR 115 only for: Windows (7–8.1) macOS (10.12–10.14) ESR 128+ only for: Windows (10+) macOS (10.15+) Linux | No | No | Yes | Yes | Yes | No | Yes | Yes | Yes | Not affected | Mitigated | Not affected | Only as fallback | Not affected | Mitigated | Yes |
| Mozilla Firefox (Firefox for mobile) | 44–48 ESR 45 | 44–48 ESR 45 | Windows (10+) macOS (10.15+) Linux Android (5.0+) iOS (15+) Firefox OS Maemo ESR 115 only for: Windows (7–8.1) macOS (10.12–10.14) ESR 128+ only for: Windows (10+) macOS (10.15+) Linux | No | No | Yes | Yes | Yes | No | Yes | Yes | Yes | Not affected | Mitigated | Not affected | Disabled by default | Not affected | Mitigated | Yes |
| Mozilla Firefox (Firefox for mobile) | 49–59 ESR 52 | 49–59 ESR 52 | Windows (10+) macOS (10.15+) Linux Android (5.0+) iOS (15+) Firefox OS Maemo ESR 115 only for: Windows (7–8.1) macOS (10.12–10.14) ESR 128+ only for: Windows (10+) macOS (10.15+) Linux | No | No | Yes | Yes | Yes | Disabled by default (draft version) | Yes | Yes | Yes | Not affected | Mitigated | Not affected | Disabled by default | Not affected | Mitigated | Yes |
| Mozilla Firefox (Firefox for mobile) | 60–62 ESR 60 | 60–62 ESR 60 | Windows (10+) macOS (10.15+) Linux Android (5.0+) iOS (15+) Firefox OS Maemo ESR 115 only for: Windows (7–8.1) macOS (10.12–10.14) ESR 128+ only for: Windows (10+) macOS (10.15+) Linux | No | No | Yes | Yes | Yes | Yes (draft version) | Yes | Yes | Yes | Not affected | Mitigated | Not affected | Disabled by default | Not affected | Mitigated | Yes |
| Mozilla Firefox (Firefox for mobile) | 63–77 ESR 68 | 63–77 ESR 68 | Windows (10+) macOS (10.15+) Linux Android (5.0+) iOS (15+) Firefox OS Maemo ESR 115 only for: Windows (7–8.1) macOS (10.12–10.14) ESR 128+ only for: Windows (10+) macOS (10.15+) Linux | No | No | Yes | Yes | Yes | Yes | Yes | Yes | Yes | Not affected | Mitigated | Not affected | Disabled by default | Not affected | Mitigated | Yes |
| Mozilla Firefox (Firefox for mobile) | 78–135 ESR 78–115.20 ESR 128.0–128.7 | 78–135 ESR 78–115.20 ESR 128.0–128.7 | Windows (10+) macOS (10.15+) Linux Android (5.0+) iOS (15+) Firefox OS Maemo ESR 115 only for: Windows (7–8.1) macOS (10.12–10.14) ESR 128+ only for: Windows (10+) macOS (10.15+) Linux | No | No | Disabled by default | Disabled by default | Yes | Yes | Yes | Yes | Yes | Not affected | Mitigated | Not affected | Disabled by default | Not affected | Mitigated | Yes |
| Yes ||
| Yes ||
| Yes ||
| Browser or OS API | Version | Version | Platforms | SSL 2.0 (insecure) | SSL 3.0 (insecure) | TLS 1.0 (deprecated) | TLS 1.1 (deprecated) | TLS 1.2 | TLS 1.3 | EV certificate | SHA-2 certificate | ECDSA certificate | BEAST | CRIME | POODLE (SSLv3) | RC4 | FREAK | Logjam | Protocol selection by user |
| Microsoft Internet Explorer (1–10) Windows Schannel | 1.x | 1.x | Windows 3.1, 95, NT, Mac OS 7, 8 | No SSL/TLS support | No SSL/TLS support | No SSL/TLS support | No SSL/TLS support | No SSL/TLS support | No SSL/TLS support | No SSL/TLS support | No SSL/TLS support | No SSL/TLS support | No SSL/TLS support | No SSL/TLS support | No SSL/TLS support | No SSL/TLS support | No SSL/TLS support | No SSL/TLS support | No SSL/TLS support |
| Microsoft Internet Explorer (1–10) Windows Schannel | 2 | 2 | Windows 3.1, 95, NT, Mac OS 7, 8 | Yes | No | No | No | No | No | No | No | No | No SSL 3.0 or TLS support | No SSL 3.0 or TLS support | No SSL 3.0 or TLS support | Vulnerable | Vulnerable | Vulnerable | — |
| Microsoft Internet Explorer (1–10) Windows Schannel | 3 | 3 | Windows 3.1, 95, NT, Mac OS 7, 8 | Yes | Yes | No | No | No | No | No | No | No | Vulnerable | Not affected | Vulnerable | Vulnerable | Vulnerable | Vulnerable | ? |
| Microsoft Internet Explorer (1–10) Windows Schannel | 4, 5, 6 | 4, 5, 6 | Windows 3.1, 95, 98, NT, 2000 Mac OS 7.1, 8, X, Solaris, HP-UX | Yes | Yes | Disabled by default | No | No | No | No | No | No | Vulnerable | Not affected | Vulnerable | Vulnerable | Vulnerable | Vulnerable | Yes |
| Microsoft Internet Explorer (1–10) Windows Schannel | 6 | 6 | Windows XP | Yes | Yes | Disabled by default | No | No | No | No | Yes (Since SP3) | No | Mitigated | Not affected | Vulnerable | Vulnerable | Vulnerable | Vulnerable | Yes |
| Microsoft Internet Explorer (1–10) Windows Schannel | 7, 8 | 7, 8 | Windows XP | Disabled by default | Yes | Yes | No | No | No | Yes | Yes (Since SP3) | No | Mitigated | Not affected | Vulnerable | Vulnerable | Vulnerable | Vulnerable | Yes |
| Microsoft Internet Explorer (1–10) Windows Schannel | 6 | 6 | Server 2003 | Yes | Yes | Disabled by default | No | No | No | No | Yes (KB938397+KB968730) | No | Mitigated | Not affected | Vulnerable | Vulnerable | Mitigated | Mitigated | Yes |
| Microsoft Internet Explorer (1–10) Windows Schannel | 7, 8 | 7, 8 | Server 2003 | Disabled by default | Yes | Yes | No | No | No | Yes | Yes (KB938397+KB968730) | No | Mitigated | Not affected | Vulnerable | Vulnerable | Mitigated | Mitigated | Yes |
| Microsoft Internet Explorer (1–10) Windows Schannel | 7, 8, 9 | 7, 8, 9 | Windows Vista | Disabled by default | Yes | Yes | No | No | No | Yes | Yes | Yes | Mitigated | Not affected | Vulnerable | Vulnerable | Mitigated | Mitigated | Yes |
| Microsoft Internet Explorer (1–10) Windows Schannel | 7, 8, 9 | 7, 8, 9 | Server 2008 | Disabled by default | Yes | Yes | Disabled by default (KB4019276) | Disabled by default (KB4019276) | No | Yes | Yes | Yes | Mitigated | Not affected | Vulnerable | Vulnerable | Mitigated | Mitigated | Yes |
| Microsoft Internet Explorer (1–10) Windows Schannel | 8, 9, 10 | 8, 9, 10 | 7, 8 Server 2008 R2 Server 2012 | Disabled by default | Yes | Yes | Disabled by default | Disabled by default | No | Yes | Yes | Yes | Mitigated | Not affected | Vulnerable | Lowest priority | Mitigated | Mitigated | Yes |
| Internet Explorer 11 Windows Schannel | 11 | 11 | 7, 8.1 Server 2008 R2 Server 2012 Server 2012 R2 | Disabled by default | Disabled by default | Disabled by default | Disabled by default | Yes | No | Yes | Yes | Yes | Mitigated | Not affected | Mitigated | Disabled by default | Mitigated | Mitigated | Yes |
| Browser or OS API | Version | Version | Platforms | SSL 2.0 (insecure) | SSL 3.0 (insecure) | TLS 1.0 (deprecated) | TLS 1.1 (deprecated) | TLS 1.2 | TLS 1.3 | EV certificate | SHA-2 certificate | ECDSA certificate | BEAST | CRIME | POODLE (SSLv3) | RC4 | FREAK | Logjam | Protocol selection by user |
| Microsoft Edge (12–18) (EdgeHTML-based) Client only Internet Explorer 11 Windows Schannel | 11 | 12–13 | Windows 10 1507–1511 | Disabled by default | Yes | Yes | Yes | Yes | No | Yes | Yes | Yes | Mitigated | Not affected | Mitigated | Disabled by default | Mitigated | Mitigated | Yes |
| Microsoft Edge (12–18) (EdgeHTML-based) Client only Internet Explorer 11 Windows Schannel | 11 | 14–18 (client only) | Windows 10 1607–2004 Windows Server (SAC) 1709–2004 | No | Disabled by default | Yes | Yes | Yes | No | Yes | Yes | Yes | Mitigated | Not affected | Mitigated | Disabled by default | Mitigated | Mitigated | Yes |
| Internet Explorer 11 Windows Schannel | 11 | 11 | Windows 10 20H2–21H2 Windows Server (SAC) 20H2 | No | Disabled by default | Disabled by default | Disabled by default | Yes | No | Yes | Yes | Yes | Mitigated | Not affected | Mitigated | Disabled by default | Mitigated | Mitigated | Yes |
| Internet Explorer 11 Windows Schannel | 11 | 11 | Windows 10 22H2 | No | Disabled by default | Disabled by default | Disabled by default | Yes | No | Yes | Yes | Yes | Mitigated | Not affected | Mitigated | Disabled by default | Mitigated | Mitigated | Yes |
| Windows Schannel | Windows 11 21H2 | Windows 11 21H2 | Windows 11 21H2 | No | Disabled by default | Disabled by default | Disabled by default | Yes | Yes | Yes | Yes | Yes | Mitigated | Not affected | Mitigated | Disabled by default | Mitigated | Mitigated | Yes |
| Windows Schannel | Windows 11 22H2 (Home/Pro) | Windows 11 22H2 (Home/Pro) | Windows 11 22H2 (Home/Pro) | No | Disabled by default | Disabled by default | Disabled by default | Yes | Yes | Yes | Yes | Yes | Mitigated | Not affected | Mitigated | Disabled by default | Mitigated | Mitigated | Yes |
| Yes |||
| Windows Schannel | Windows 11 23H2 (Home/Pro) | Windows 11 23H2 (Home/Pro) | Windows 11 23H2 (Home/Pro) | No | Disabled by default | Disabled by default | Disabled by default | Yes | Yes | Yes | Yes | Yes | Mitigated | Not affected | Mitigated | Disabled by default | Mitigated | Mitigated | Yes |
| Yes |||
| Windows Schannel | Windows 11 24H2 | Windows 11 24H2 | Windows 11 24H2 | No | Disabled by default | Disabled by default | Disabled by default | Yes | Yes | Yes | Yes | Yes | Mitigated | Not affected | Mitigated | Disabled by default | Mitigated | Mitigated | Yes |
| Internet Explorer 11 LTSB/LTSC Windows Schannel LTSB/LTSC | 11 | 11 | Windows 10 LTSB 2015 (1507) | Disabled by default | Yes | Disabled by default | Disabled by default | Yes | No | Yes | Yes | Yes | Mitigated | Not affected | Mitigated | Disabled by default | Mitigated | Mitigated | Yes |
| Internet Explorer 11 LTSB/LTSC Windows Schannel LTSB/LTSC | 11 | 11 | Windows 10 LTSB 2016 (1607) | No | Disabled by default | Disabled by default | Disabled by default | Yes | No | Yes | Yes | Yes | Mitigated | Not affected | Mitigated | Disabled by default | Mitigated | Mitigated | Yes |
| Internet Explorer 11 LTSB/LTSC Windows Schannel LTSB/LTSC | 11 | 11 | Windows Server 2016 (LTSB/1607) | No | Disabled by default | Disabled by default | Disabled by default | Yes | No | Yes | Yes | Yes | Mitigated | Not affected | Mitigated | Disabled by default | Mitigated | Mitigated | Yes |
| Internet Explorer 11 LTSB/LTSC Windows Schannel LTSB/LTSC | 11 | 11 | Windows 10 LTSC 2019 (1809) Windows Server 2019 (LTSC/1809) | No | Disabled by default | Disabled by default | Disabled by default | Yes | No | Yes | Yes | Yes | Mitigated | Not affected | Mitigated | Disabled by default | Mitigated | Mitigated | Yes |
| Internet Explorer 11 LTSB/LTSC Windows Schannel LTSB/LTSC | 11 | 11 | Windows 10 LTSC 2021 (21H2) | No | Disabled by default | Disabled by default | Disabled by default | Yes | No | Yes | Yes | Yes | Mitigated | Not affected | Mitigated | Disabled by default | Mitigated | Mitigated | Yes |
| Internet Explorer 11 LTSB/LTSC Windows Schannel LTSB/LTSC | 11 | 11 | Windows Server 2022 (LTSC/21H2) | No | Disabled by default | Disabled by default | Disabled by default | Yes | Yes | Yes | Yes | Yes | Mitigated | Not affected | Mitigated | Disabled by default | Mitigated | Mitigated | Yes |
| Windows Schannel LTSC | Windows 11 LTSC 2024 (24H2) | Windows 11 LTSC 2024 (24H2) | Windows 11 LTSC 2024 (24H2) | No | Disabled by default | Disabled by default | Disabled by default | Yes | Yes | Yes | Yes | Yes | Mitigated | Not affected | Mitigated | Disabled by default | Mitigated | Mitigated | Yes |
| Windows Schannel LTSC | Windows Server 2025 (LTSC/24H2) | Windows Server 2025 (LTSC/24H2) | Windows Server 2025 (LTSC/24H2) | No | Disabled by default | Disabled by default | Disabled by default | Yes | Yes | Yes | Yes | Yes | Mitigated | Not affected | Mitigated | Disabled by default | Mitigated | Mitigated | Yes |
| Browser or OS API | Version | Version | Platforms | SSL 2.0 (insecure) | SSL 3.0 (insecure) | TLS 1.0 (deprecated) | TLS 1.1 (deprecated) | TLS 1.2 | TLS 1.3 | EV certificate | SHA-2 certificate | ECDSA certificate | BEAST | CRIME | POODLE (SSLv3) | RC4 | FREAK | Logjam | Protocol selection by user |
| Microsoft Internet Explorer Mobile | 7–9 | 7–9 | Windows Phone 7, 7.5, 7.8 | Disabled by default | Yes | Yes | No | No | No | No | Yes | Yes | ? | Not affected | Vulnerable | Vulnerable | Vulnerable | Vulnerable | Only with 3rd party tools |
| Microsoft Internet Explorer Mobile | 10 | 10 | Windows Phone 8 | Disabled by default | Yes | Yes | Disabled by default | Disabled by default | No | No | Yes | Yes | Mitigated | Not affected | Vulnerable | Vulnerable | Vulnerable | Vulnerable | Only with 3rd party tools |
| Microsoft Internet Explorer Mobile | 11 | 11 | Windows Phone 8.1 | Disabled by default | Yes | Yes | Yes | Yes | No | No | Yes | Yes | Mitigated | Not affected | Vulnerable | Only as fallback | Vulnerable | Vulnerable | Only with 3rd party tools |
| Microsoft Edge (13–15) (EdgeHTML-based) | 13 | 13 | Windows 10 Mobile 1511 | Disabled by default | Disabled by default | Yes | Yes | Yes | No | Yes | Yes | Yes | Mitigated | Not affected | Mitigated | Disabled by default | Mitigated | Mitigated | No |
| Microsoft Edge (13–15) (EdgeHTML-based) | 14, 15 | 14, 15 | Windows 10 Mobile 1607–1709 | No | Disabled by default | Yes | Yes | Yes | No | Yes | Yes | Yes | Mitigated | Not affected | Mitigated | Disabled by default | Mitigated | Mitigated | No |
| Browser or OS API | Version | Version | Platforms | SSL 2.0 (insecure) | SSL 3.0 (insecure) | TLS 1.0 (deprecated) | TLS 1.1 (deprecated) | TLS 1.2 | TLS 1.3 | EV certificate | SHA-2 certificate | ECDSA certificate | BEAST | CRIME | POODLE (SSLv3) | RC4 | FREAK | Logjam | Protocol selection by user |
| Apple Safari | 1 | 1 | Mac OS X 10.2, 10.3 | No | Yes | Yes | No | No | No | No | No | No | Vulnerable | Not affected | Vulnerable | Vulnerable | Vulnerable | Vulnerable | No |
| Apple Safari | 2–5 | 2–5 | Mac OS X 10.4, 10.5, Win XP | No | Yes | Yes | No | No | No | Yes (Since v3.2) | No | No | Vulnerable | Not affected | Vulnerable | Vulnerable | Vulnerable | Vulnerable | No |
| Apple Safari | 3–5 | 3–5 | Vista, Win 7 | No | Yes | Yes | No | No | No | Yes (Since v3.2) | No | Yes | Vulnerable | Not affected | Vulnerable | Vulnerable | Vulnerable | Vulnerable | No |
| Apple Safari | 4–6 | 4–6 | Mac OS X 10.6, 10.7 | No | Yes | Yes | No | No | No | Yes | Yes | Yes | Vulnerable | Not affected | Vulnerable | Vulnerable | Vulnerable | Vulnerable | No |
| Apple Safari | 6 | 6 | OS X 10.8 | No | Yes | Yes | No | No | No | Yes | Yes | Yes | Mitigated | Not affected | Mitigated | Vulnerable | Mitigated | Vulnerable | No |
| Apple Safari | 7, 9 | 7, 9 | OS X 10.9 | No | Yes | Yes | Yes | Yes | No | Yes | Yes | Yes | Mitigated | Not affected | Mitigated | Vulnerable | Mitigated | Vulnerable | No |
| Apple Safari | 8–10 | 8–10 | OS X 10.10 | No | Yes | Yes | Yes | Yes | No | Yes | Yes | Yes | Mitigated | Not affected | Mitigated | Lowest priority | Mitigated | Mitigated | No |
| Apple Safari | 9–11 | 9–11 | OS X 10.11 | No | No | Yes | Yes | Yes | No | Yes | Yes | Yes | Mitigated | Not affected | Not affected | Lowest priority | Mitigated | Mitigated | No |
| Apple Safari | 10–15 | 10–15 | macOS 10.12, 10.13, 10.14, 10.15 | No | No | Yes | Yes | Yes | Yes (Since macOS 10.14.4) | Yes | Yes | Yes | Mitigated | Not affected | Not affected | Disabled by default | Mitigated | Mitigated | No |
| Apple Safari | 14–17 | 14–17 | macOS 11, 12 | No | No | Yes | Yes | Yes | Yes | Yes | Yes | Yes | Mitigated | Not affected | Not affected | Disabled by default | Mitigated | Mitigated | No |
| Apple Safari | 16, 17 | 18 | macOS 13 | No | No | Yes | Yes | Yes | Yes | Yes | Yes | Yes | Mitigated | Not affected | Not affected | Disabled by default | Mitigated | Mitigated | No |
| Apple Safari | 17 | 18 | macOS 14 | No | No | Yes | Yes | Yes | Yes | Yes | Yes | Yes | Mitigated | Not affected | Not affected | Disabled by default | Mitigated | Mitigated | No |
| Apple Safari | 18 | 18 | macOS 15 | No | No | Yes | Yes | Yes | Yes | Yes | Yes | Yes | Mitigated | Not affected | Not affected | Disabled by default | Mitigated | Mitigated | No |
| Browser or OS API | Version | Version | Platforms | SSL 2.0 (insecure) | SSL 3.0 (insecure) | TLS 1.0 (deprecated) | TLS 1.1 (deprecated) | TLS 1.2 | TLS 1.3 | EV certificate | SHA-2 certificate | ECDSA certificate | BEAST | CRIME | POODLE (SSLv3) | RC4 | FREAK | Logjam | Protocol selection by user |
| Apple Safari (mobile) | 3 | 3 | iPhone OS 1, 2 | No | Yes | Yes | No | No | No | No | No | No | Vulnerable | Not affected | Vulnerable | Vulnerable | Vulnerable | Vulnerable | No |
| Apple Safari (mobile) | 4, 5 | 4, 5 | iPhone OS 3, iOS 4 | No | Yes | Yes | No | No | No | Yes | Yes | Yes (Since iOS 4) | Vulnerable | Not affected | Vulnerable | Vulnerable | Vulnerable | Vulnerable | No |
| Apple Safari (mobile) | 5, 6 | 5, 6 | iOS 5, 6 | No | Yes | Yes | Yes | Yes | No | Yes | Yes | Yes | Vulnerable | Not affected | Vulnerable | Vulnerable | Vulnerable | Vulnerable | No |
| Apple Safari (mobile) | 7 | 7 | iOS 7 | No | Yes | Yes | Yes | Yes | No | Yes | Yes | Yes | Mitigated | Not affected | Vulnerable | Vulnerable | Vulnerable | Vulnerable | No |
| Apple Safari (mobile) | 8 | 8 | iOS 8 | No | Yes | Yes | Yes | Yes | No | Yes | Yes | Yes | Mitigated | Not affected | Mitigated | Lowest priority | Mitigated | Mitigated | No |
| Apple Safari (mobile) | 9 | 9 | iOS 9 | No | No | Yes | Yes | Yes | No | Yes | Yes | Yes | Mitigated | Not affected | Not affected | Lowest priority | Mitigated | Mitigated | No |
| Apple Safari (mobile) | 10, 11 | 10, 11 | iOS 10, 11 | No | No | Yes | Yes | Yes | No | Yes | Yes | Yes | Mitigated | Not affected | Not affected | Disabled by default | Mitigated | Mitigated | No |
| Apple Safari (mobile) | 12 | 12 | iOS iOS 12 | No | No | Yes | Yes | Yes | Yes (Since iOS 12.2) | Yes | Yes | Yes | Mitigated | Not affected | Not affected | Disabled by default | Mitigated | Mitigated | No |
| Apple Safari (mobile) | 13–16 | 13–16 | iOS 13, 14, 15, 16 | No | No | Yes | Yes | Yes | Yes | Yes | Yes | Yes | Mitigated | Not affected | Not affected | Disabled by default | Mitigated | Mitigated | No |
| Apple Safari (mobile) | 13–16 | 13–16 | iPadOS 13, 14, 15, 16 | No | No | Yes | Yes | Yes | Yes | Yes | Yes | Yes | Mitigated | Not affected | Not affected | Disabled by default | Mitigated | Mitigated | No |
| Apple Safari (mobile) | 17 | 17 | iOS 17 | No | No | Yes | Yes | Yes | Yes | Yes | Yes | Yes | Mitigated | Not affected | Not affected | Disabled by default | Mitigated | Mitigated | No |
| Apple Safari (mobile) | 17 | 17 | iPadOS 17 | No | No | Yes | Yes | Yes | Yes | Yes | Yes | Yes | Mitigated | Not affected | Not affected | Disabled by default | Mitigated | Mitigated | No |
| Apple Safari (mobile) | 18 | 18 | iOS 18 | No | No | ? | ? | Yes | Yes | Yes | Yes | Yes | Mitigated | Not affected | Not affected | Disabled by default | Mitigated | Mitigated | No |
| Apple Safari (mobile) | 18 | 18 | iPadOS 18 | No | No | ? | ? | Yes | Yes | Yes | Yes | Yes | Mitigated | Not affected | Not affected | Disabled by default | Mitigated | Mitigated | No |
| Browser or OS API | Version | Version | Platforms | SSL 2.0 (insecure) | SSL 3.0 (insecure) | TLS 1.0 (deprecated) | TLS 1.1 (deprecated) | TLS 1.2 | TLS 1.3 | EV | SHA-2 | ECDSA | BEAST | CRIME | POODLE (SSLv3) | RC4 | FREAK | Logjam | Protocol selection by user |
| Google Android OS | Android 1.0–4.0.4 | Android 1.0–4.0.4 | Android 1.0–4.0.4 | No | Yes | Yes | No | No | No | ? | Yes | Yes (Since 3.0) | ? | ? | Vulnerable | Vulnerable | Vulnerable | Vulnerable | No |
| Google Android OS | Android 4.1–4.4.4 | Android 4.1–4.4.4 | Android 4.1–4.4.4 | No | Yes | Yes | Disabled by default | Disabled by default | No | ? | Yes | Yes | ? | ? | Vulnerable | Vulnerable | Vulnerable | Vulnerable | No |
| Google Android OS | Android 5.0–5.0.2 | Android 5.0–5.0.2 | Android 5.0–5.0.2 | No | Yes | Yes | Yes | Yes | No | ? | Yes | Yes | ? | ? | Vulnerable | Vulnerable | Vulnerable | Vulnerable | No |
| Google Android OS | Android 5.1–5.1.1 | Android 5.1–5.1.1 | Android 5.1–5.1.1 | No | Disabled by default | Yes | Yes | Yes | No | ? | Yes | Yes | ? | ? | Not affected | Only as fallback | Mitigated | Mitigated | No |
| Google Android OS | Android 6.0–7.1.2 | Android 6.0–7.1.2 | Android 6.0–7.1.2 | No | Disabled by default | Yes | Yes | Yes | No | ? | Yes | Yes | ? | ? | Not affected | Disabled by default | Mitigated | Mitigated | No |
| Google Android OS | Android 8.0–9 | Android 8.0–9 | Android 8.0–9 | No | No | Yes | Yes | Yes | No | ? | Yes | Yes | ? | ? | Not affected | Disabled by default | Mitigated | Mitigated | No |
| Google Android OS | Android 10–11 | Android 10–11 | Android 10–11 | No | No | Yes | Yes | Yes | Yes | ? | Yes | Yes | ? | ? | Not affected | Disabled by default | Mitigated | Mitigated | No |
| Google Android OS | Android 12 | Android 12 | Android 12 | No | No | Yes | Yes | Yes | Yes | ? | Yes | Yes | ? | ? | Not affected | Disabled by default | Mitigated | Mitigated | No |
| Google Android OS | Android 12L | Android 12L | Android 12L | No | No | Yes | Yes | Yes | Yes | ? | Yes | Yes | ? | ? | Not affected | Disabled by default | Mitigated | Mitigated | No |
| Google Android OS | Android 13 | Android 13 | Android 13 | No | No | Yes | Yes | Yes | Yes | ? | Yes | Yes | ? | ? | Not affected | Disabled by default | Mitigated | Mitigated | No |
| Google Android OS | Android 14 | Android 14 | Android 14 | No | No | Yes | Yes | Yes | Yes | ? | Yes | Yes | ? | ? | Not affected | Disabled by default | Mitigated | Mitigated | No |
| Google Android OS | Android 15 | Android 15 | Android 15 | No | No | ? | ? | Yes | Yes | ? | Yes | Yes | ? | ? | Not affected | Disabled by default | Mitigated | Mitigated | No |
| Google Android OS | Android 16 | Android 16 | Android 16 | No | No | ? | ? | Yes | Yes | ? | Yes | Yes | ? | ? | Not affected | Disabled by default | Mitigated | Mitigated | No |
| Browser or OS API | Version | Version | Platforms | SSL 2.0 (insecure) | SSL 3.0 (insecure) | TLS 1.0 (deprecated) | TLS 1.1 (deprecated) | TLS 1.2 | TLS 1.3 | EV certificate | SHA-2 certificate | ECDSA certificate | BEAST | CRIME | POODLE (SSLv3) | RC4 | FREAK | Logjam | Protocol selection by user |
| Color or Note | Color or Note | Significance |
| Browser version | Platform | Significance |
| Browser version | Operating system | Future release; under development |
| Browser version | Operating system | Current latest release |
| Browser version | Operating system | Former release; still supported |
| Browser version | Operating system | Former release; long-term support still active, but will end in less than 12 months |
| Browser version | Operating system | Former release; no longer supported |
| — | Operating system | Mixed/Unspecified |
| Operating system (Version+) | Minimum required operating system version (for supported versions of the browser) |
| Operating system | No longer supported for this operating system |

## Notes

* ↑ Note actual security depends on other factors such as negotiated cipher, encryption strength, etc. (see § Cipher table).
* ↑ Whether a user or administrator can choose the protocols to be used or not. If yes, several attacks such as BEAST (vulnerable in SSL 3.0 and TLS 1.0) or POODLE (vulnerable in SSL 3.0) can be avoided.
* 1 2 Whether EV SSL and DV SSL (normal SSL) can be distinguished by indicators (green lock icon, green address bar, etc.) or not.
* 1 2 e.g. 1/n-1 record splitting.
* 1 2 e.g. Disabling header compression in HTTPS/SPDY.
* 1 2 Complete mitigations; disabling SSL 3.0 itself, "anti-POODLE record splitting". "Anti-POODLE record splitting" is effective only with client-side implementation and valid according to the SSL 3.0 specification, however, it may also cause compatibility issues due to problems in server-side implementations. Partial mitigations; disabling fallback to SSL 3.0, TLS_FALLBACK_SCSV, disabling cipher suites with CBC mode of operation. If the server also supports TLS_FALLBACK_SCSV, the POODLE attack will fail against this combination of server and browser, but connections where the server does not support TLS_FALLBACK_SCSV and does support SSL 3.0 will still be vulnerable. If disabling cipher suites with CBC mode of operation in SSL 3.0, only cipher suites with RC4 are available, RC4 attacks become easier. When disabling SSL 3.0 manually, POODLE attack will fail.
* 1 2 Complete mitigation; disabling cipher suites with RC4. Partial mitigations to keeping compatibility with old systems; setting the priority of RC4 to lower.
* ↑ Google Chrome (and Chromium) supports TLS 1.0, and TLS 1.1 from version 22 (it was added, then dropped from version 21). TLS 1.2 support had been added, then dropped from Chrome 29.
* ↑ Uses the TLS implementation provided by BoringSSL for Android, OS X, and Windows or by NSS for Linux. Google is switching the TLS library used in Chrome to BoringSSL from NSS completely.
* 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 Configure enabling/disabling of each protocols via setting/option (menu name is dependent on browsers).
* 1 2 3 4 5 6 7 8 9 10 11 12 configure the maximum and the minimum version of enabling protocols with command-line option.
* ↑ TLS_FALLBACK_SCSV is implemented. Fallback to SSL 3.0 is disabled since version 39.
* ↑ In addition to TLS_FALLBACK_SCSV and disabling a fallback to SSL 3.0, SSL 3.0 itself is disabled by default.
* 1 2 3 Configure the minimum version of enabling protocols via chrome://flags (the maximum version can be configured with command-line option).
* 1 2 3 4 5 6 7 Only when no cipher suites with other than RC4 is available, cipher suites with RC4 will be used as a fallback.
* 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 All RC4 cipher suites are disabled by default.
* ↑ Uses the TLS implementation provided by NSS. As of Firefox 22, Firefox supports only TLS 1.0 despite the bundled NSS supporting TLS 1.1. Since Firefox 23, TLS 1.1 can be enabled, but was not enabled by default due to issues. Firefox 24 has TLS 1.2 support disabled by default. TLS 1.1 and TLS 1.2 have been enabled by default in Firefox 27 release.
* 1 2 3 4 5 6 7 8 9 10 11 12 13 14 Configure the maximum and the minimum version of enabling protocols via about:config.
* ↑ SSL 3.0 itself is disabled by default. In addition, fallback to SSL 3.0 is disabled since version 34, and TLS_FALLBACK_SCSV is implemented since 35.0 and ESR 31.3.0.
* 1 2 3 4 5 6 IE uses the TLS implementation of the Microsoft Windows operating system provided by the Schannel security support provider. TLS 1.1 and 1.2 are disabled by default until IE11.
* 1 2 Windows NT 3.1 supports IE 1–2, Windows NT 3.5 supports IE 1–3, Windows NT 3.51 and Windows NT 4.0 supports IE 1–6.
* 1 2 3 4 Windows XP as well as Server 2003 and older support only weak ciphers like Triple DES and RC4 out of the box. The weak ciphers of these Schannel version are not only used for IE, but also for other Microsoft products running on this OS, like Microsoft Office or Windows Update. Only Windows Server 2003 can get a manual update to support AES ciphers by KB948963
* 1 2 3 4 MS13-095 or MS14-049 for Windows Server 2003, Windows XP x64 and Windows XP SP3 (32-bit).
* 1 2 3 4 5 6 7 8 DTLS protocol counterpart version, however, is not supported.
* ↑ RC4 can be disabled except as a fallback (Only when no cipher suites with other than RC4 is available, cipher suites with RC4 will be used as a fallback).
* ↑ IE11 will continue to support these operating systems if they are with ESUs until at least October 13, 2026.
* 1 2 Fallback to SSL 3.0 is sites blocked by default in Internet Explorer 11 for Protected Mode. SSL 3.0 is disabled by default in Internet Explorer 11 since April 2015.
* 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 TLS 1.0 and 1.1 are disabled by default in Internet Explorer 11 and EdgeHTML since September 2022.
* ↑ IE11 ran out of support for GAC (formerly CB and SAC) editions of Windows 10 since June 15, 2022.
* 1 2 3 Could be disabled via registry editing but need 3rd Party tools to do this.
* ↑ Edge (formerly known as Project Spartan) is based on a fork of the Internet Explorer 11 rendering engine.
* ↑ Safari uses the operating system implementation on Mac OS X, Windows (XP, Vista, 7) with unknown version, Safari 5 is the last version available for Windows. OS X 10.8 on have SecureTransport support for TLS 1.1 and 1.2 Qualys SSL report simulates Safari 5.1.9 connecting with TLS 1.0 not 1.1 or 1.2.
* ↑ In September 2013, Apple implemented BEAST mitigation in OS X 10.8 (Mountain Lion), but it was not turned on by default, resulting in Safari still being theoretically vulnerable to the BEAST attack on that platform. BEAST mitigation has been enabled by default from OS X 10.8.5 updated in February 2014.
* 1 2 3 4 5 6 7 8 Because Apple removed support for all CBC protocols in SSL 3.0 to mitigate POODLE, this leaves only RC4, which is also completely broken by the RC4 attacks in SSL 3.0.
* ↑ Mobile Safari and third-party software utilizing the system UIWebView library use the iOS operating system implementation, which supports TLS 1.2 as of iOS 5.0.