View source for Transport Layer Security Adoption

In applications design, [[Transport Layer Security]] (TLS) is usually implemented on top of Transport Layer protocols, encrypting all of the protocol-related data of protocols such as [[Hypertext Transfer Protocol|HTTP]], [[File Transfer Protocol|FTP]], [[Simple Mail Transfer Protocol|SMTP]], [[Social:Network News Transfer Protocol|NNTP]] and XMPP.

Historically, TLS has been used primarily with reliable transport protocols such as the [[Transmission Control Protocol]] (TCP). However, it has also been implemented with datagram-oriented transport protocols, such as the [[User Datagram Protocol]] (UDP) and the [[Datagram Congestion Control Protocol]] (DCCP), usage of which has been standardized independently using the term [[Datagram Transport Layer Security]] (DTLS).

==Websites==
A primary use of TLS is to secure [[World Wide Web]] traffic between a website and a [[Software:Web browser|web browser]] encoded with the HTTP protocol. This use of TLS to secure HTTP traffic constitutes the HTTPS protocol.<ref>{{cite web |url=https://www.instantssl.com/ssl-certificate-products/https.html |title=Http vs https |accessdate=2015-02-12 |url-status=live |archiveurl=https://web.archive.org/web/20150212105201/https://www.instantssl.com/ssl-certificate-products/https.html |archivedate=2015-02-12}}</ref>
{|class="wikitable" style="text-align: center;"
|+Website protocol support
|-
!Protocol<br />version
!Website<br />support<ref name="trustworthy_ssl_pulse">As of May 3, 2019. {{cite web |url=https://www.ssllabs.com/ssl-pulse/ |title=SSL Pulse: Survey of the SSL Implementation of the Most Popular Websites |website=[[Company:Qualys|Qualys]] |accessdate=2019-05-09}}</ref>
!Security<ref name="trustworthy_ssl_pulse"/><ref name="community.qualys">{{cite web|url=https://community.qualys.com/blogs/securitylabs/2013/03/19/rc4-in-tls-is-broken-now-what|accessdate=2013-07-30|publisher=Qualsys Security Labs|author=ivanr|title=RC4 in TLS is Broken: Now What?|url-status=live|archiveurl=https://web.archive.org/web/20130827044512/https://community.qualys.com/blogs/securitylabs/2013/03/19/rc4-in-tls-is-broken-now-what|archivedate=2013-08-27}}</ref>
|-
!SSL 2.0
|1.9%
|{{Bad|Insecure}}
|-
!SSL 3.0
|7.6%
|{{Bad|Insecure<ref name="poodle_pdf" />}}
|-
!TLS 1.0
|68.0%
|{{Depends|Depends on cipher<ref group="n" name="ciphers">see § Cipher table above</ref> and client mitigations<ref group="n" name="mitigations">see § Web browsers and § Attacks against TLS/SSL sections</ref>}}
|-
!TLS 1.1
|77.4%
|{{Depends|Depends on cipher<ref group="n" name="ciphers"/> and client mitigations<ref group="n" name="mitigations"/>}}
|-
!TLS 1.2
|95.2%
|{{Depends|Depends on cipher<ref group="n" name="ciphers"/> and client mitigations<ref group="n" name="mitigations"/>}}
|-
!TLS 1.3
|14.2%
|{{Good|Secure}}
|}
;Notes
{{reflist|group="n"}}

==Web browsers==
{{Further|Software:Comparison of web browsers}}
{{As of|2016|04}}, the latest versions of all major web browsers support TLS 1.0, 1.1, and 1.2, and have them enabled by default. However, not all supported [[Software:List of Microsoft operating systems|Microsoft operating systems]] support the latest version of IE. Additionally, many operating systems currently support multiple versions of IE, but this has changed according to Microsoft's [https://support.microsoft.com/en-us/gp/microsoft-internet-explorer Internet Explorer Support Lifecycle Policy FAQ], "beginning January 12, 2016, only the most current version of Internet Explorer available for a supported operating system will receive technical support and security updates." The page then goes on to list the latest supported version of IE at that date for each operating system. The next critical date would be when an operating system reaches the end of life stage, which is in Microsoft's [https://windows.microsoft.com/en-us/windows/lifecycle Windows lifecycle fact sheet].

There are still problems on several browser versions:
* TLS 1.1 and 1.2 supported, but disabled by default: [[Software:Internet Explorer 10|Internet Explorer 10]] for [[Software:Windows Server 2012|Server 2012]] and [[Software:Internet Explorer 9|Internet Explorer 9]] for [[Software:Windows Server 2008|Server 2008]]<ref name="2008R1TLS1.2">{{cite web |url=https://support.microsoft.com/kb/4019276 |title=Update to add support for TLS 1.1 and TLS 1.2 in Windows Server 2008 SP2, Windows Embedded POSReady 2009, and Windows Embedded Standard 2009 |accessdate=2017-07-19}}</ref>

Mitigations against known attacks are not enough yet:
* Mitigations against POODLE attack: some browsers already prevent fallback to SSL 3.0; however, this mitigation needs to be supported by not only clients but also servers. Disabling SSL 3.0 itself, implementation of "anti-POODLE record splitting", or denying CBC ciphers in SSL 3.0 is required.
** Google Chrome: complete (TLS_FALLBACK_SCSV is implemented since version 33, fallback to SSL 3.0 is disabled since version 39, SSL 3.0 itself is disabled by default since version 40. Support of SSL 3.0 itself was dropped since version 44.)
** Mozilla Firefox: complete (support of SSL 3.0 itself is dropped since [[Software:History of Firefox#Version 38–44|version 39]]. SSL 3.0 itself is disabled by default and fallback to SSL 3.0 are disabled since [[Software:History of Firefox#Version 31–37|version 34]], TLS_FALLBACK_SCSV is implemented since version 35. In ESR, SSL 3.0 itself is disabled by default and TLS_FALLBACK_SCSV is implemented since ESR 31.3.)
** Internet Explorer: partial (only in version 11, SSL 3.0 is disabled by default since April 2015. Version 10 and older are still vulnerable against POODLE.)
** [[Software:Opera (web browser)|Opera]]: complete (TLS_FALLBACK_SCSV is implemented since version 20, "anti-POODLE record splitting", which is effective only with client-side implementation, is implemented since version 25, SSL 3.0 itself is disabled by default since version 27. Support of SSL 3.0 itself will be dropped since version 31.)
** Safari: complete (only on OS X 10.8 and later and iOS 8, CBC ciphers during fallback to SSL 3.0 is denied, but this means it will use RC4, which is not recommended as well. Support of SSL 3.0 itself is dropped on OS X 10.11 and later and iOS 9.)
* Mitigation against RC4 attacks:
** Google Chrome disabled RC4 except as a fallback since version 43. RC4 is disabled since Chrome 48.
** Firefox disabled RC4 except as a fallback since version 36. Firefox 44 disabled RC4 by default.
** Opera disabled RC4 except as a fallback since version 30. RC4 is disabled since Opera 35.
** Internet Explorer for [[Software:Windows 7|Windows 7]] / Server 2008 R2 and for [[Software:Windows 8|Windows 8]] / Server 2012 have set the priority of RC4 to lowest and can also disable RC4 except as a fallback through registry settings. Internet Explorer 11 Mobile 11 for [[Software:Windows Phone 8.1|Windows Phone 8.1]] disable RC4 except as a fallback if no other enabled algorithm works. Edge and IE 11 disable RC4 completely in August 2016.
* Mitigation against FREAK attack:
** The Android Browser of [[Software:Android Ice Cream Sandwich|Android 4]] and older is still vulnerable to the FREAK attack.
** Internet Explorer 11 Mobile is still vulnerable to the FREAK attack.
** Google Chrome, Internet Explorer (desktop), Safari (desktop & mobile), and Opera (mobile) have FREAK mitigations in place.
** Mozilla Firefox on all platforms and Google Chrome on Windows were not affected by FREAK.

{{clear}}
{|class="wikitable" id="browsersTLS" style="text-align: center; font-size: smaller; margin-top: 0px;"
|+'''TLS/SSL support history of web browsers'''
! rowspan="2" | Browser
! colspan="2" rowspan="2" | Version
! rowspan="2" | Platforms
! colspan="2" | SSL protocols
! colspan="4" | TLS protocols
! colspan="3" | Certificate support
! colspan="6" | Vulnerabilities fixed{{refn | group="n" | name="note-sec" |Does the browser have mitigations or is not vulnerable for the known attacks. Note actual security depends on other factors such as negotiated cipher, encryption strength etc (see § Cipher table).}}
! rowspan="2" | Protocol selection by user<br /><ref group="n" name="note-poodle">Whether a user or administrator can choose the protocols to be used or not. If yes, several attacks such as BEAST (vulnerable in SSL 3.0 and TLS 1.0) or POODLE (vulnerable in SSL 3.0) can be avoided.</ref>
|-
! SSL 2.0 (insecure)
! SSL 3.0 (insecure)
! TLS 1.0
! TLS 1.1
! TLS 1.2
! TLS 1.3
! [[Extended Validation Certificate|EV]]<br /><ref group="n" name="note-evssl">Whether EV SSL and DV SSL (normal SSL) can be distinguished by indicators (green lock icon, green address bar, etc.) or not.</ref><ref name="EVSSLbrowser">{{cite web |url=https://knowledge.verisign.com/support/ssl-certificates-support/index?page=content&id=SO10090&actp=search&viewlocale=en_US&searchid=1406590748892 |title=What browsers support Extended Validation (EV) and display an EV indicator? |publisher=[[Company:NortonLifeLock|Symantec]] |accessdate=2014-07-28 |url-status=dead |archiveurl=https://web.archive.org/web/20151231171309/https://knowledge.verisign.com/support/ssl-certificates-support/index?page=content&id=SO10090&actp=search&viewlocale=en_US&searchid=1406590748892 |archivedate=2015-12-31}}</ref>
! [[SHA-2]]<br /><ref name="SHA-2">{{cite web |title=SHA-256 Compatibility |accessdate=2015-06-12 |url=https://support.globalsign.com/customer/portal/articles/1499561-sha-256-compatibility |url-status=live |archiveurl=https://web.archive.org/web/20150701004324/https://support.globalsign.com/customer/portal/articles/1499561-sha-256-compatibility |archivedate=2015-07-01}}</ref>
! ECDSA<br /><ref name="ECC">{{cite web |title=ECC Compatibility |accessdate=2015-06-13 |url=https://support.globalsign.com/customer/portal/articles/1995283-ecc-compatibility |url-status=live |archiveurl=https://web.archive.org/web/20160217122951/https://support.globalsign.com/customer/portal/articles/1995283-ecc-compatibility |archivedate=2016-02-17}}</ref>
! BEAST<ref group="n" name="note-BEASTmitigation">e.g. 1/n-1 record splitting.</ref>
! CRIME<ref group="n" name="note-CRIMEmitigation">e.g. Disabling header compression in HTTPS/SPDY.</ref>
! POODLE (SSLv3)<ref group="n" name="note-POODLEmitigation">
* Complete mitigations; disabling SSL 3.0 itself, "anti-POODLE record splitting". "Anti-POODLE record splitting" is effective only with client-side implementation and valid according to the SSL 3.0 specification, however, it may also cause compatibility issues due to problems in server-side implementations.
* Partial mitigations; disabling fallback to SSL 3.0, TLS_FALLBACK_SCSV, disabling cipher suites with [[Block cipher mode of operation#Cipher-block chaining (CBC)|CBC mode of operation]]. If the server also supports TLS_FALLBACK_SCSV, the POODLE attack will fail against this combination of server and browser, but connections where the server does not support TLS_FALLBACK_SCSV and does support SSL 3.0 will still be vulnerable. If disabling cipher suites with CBC mode of operation in SSL 3.0, only cipher suites with RC4 are available, RC4 attacks become easier.
* When disabling SSL 3.0 manually, POODLE attack will fail.</ref>
! RC4<ref group="n" name="note-RC4mitigation">
* Complete mitigation; disabling cipher suites with RC4.
* Partial mitigations to keeping compatibility with old systems; setting the priority of RC4 to lower.</ref>
! FREAK<ref name="note-FREAK-1">{{cite web|url=https://freakattack.com/|title=Tracking the FREAK Attack|accessdate=2015-03-08|url-status=live|archiveurl=https://web.archive.org/web/20150306174623/https://freakattack.com/|archivedate=2015-03-06}}</ref><ref name="note-FREAK-2">{{cite web|url=https://www.smacktls.com/#freak|title=FREAK: Factoring RSA Export Keys|accessdate=2015-03-08|url-status=live|archiveurl=https://web.archive.org/web/20150311112517/https://www.smacktls.com/#freak|archivedate=2015-03-11}}</ref>
! Logjam
|-
! rowspan="16" | [[Software:Google Chrome|Google Chrome]]<br /><small>([[Software:Google Chrome for Android|Chrome for Android]])</small><br />{{refn |group="n" |name="note-a" |[[Software:Google Chrome|Google Chrome]] (and [[Software:Chromium (web browser)|Chromium]]) supports TLS 1.0, and TLS 1.1 from version 22 (it was added, then dropped from version 21). TLS 1.2 support has been added, then dropped from Chrome 29.<ref name="Google">{{cite web |author=Google |url=http://googlechromereleases.blogspot.nl/2012/05/dev-channel-update_29.html |title=Dev Channel Update |date=2012-05-29 |accessdate=2011-06-01 |url-status=live |archiveurl=https://web.archive.org/web/20130302032339/http://googlechromereleases.blogspot.nl/2012/05/dev-channel-update_29.html |archivedate=2013-03-02}}</ref><ref name="googlechromereleases.blogspot.co.uk">{{cite web |author=Google |url=https://googlechromereleases.blogspot.co.uk/2012/08/stable-channel-update_21.html |title=Stable Channel Update |date=2012-08-21 |accessdate=2012-08-22 |url-status=live |archiveurl=https://web.archive.org/web/20120825192441/http://googlechromereleases.blogspot.co.uk/2012/08/stable-channel-update_21.html |archivedate=2012-08-25}}</ref><ref name="Chromium Project">{{cite web |author=Chromium Project |url=https://src.chromium.org/viewvc/chrome?revision=203090&view=revision |title=Chromium TLS 1.2 Implementation |date=2013-05-30}}</ref>}}<br />{{refn |group="n" |name="note-b" |Uses the TLS implementation provided by [[BoringSSL]] for Android, OS X, and Windows<ref name="The Chromium Project: BoringSSL">{{cite web|url=https://www.chromium.org/Home/chromium-security/boringssl|title=The Chromium Project: BoringSSL|accessdate=2015-09-05|url-status=live|archiveurl=https://web.archive.org/web/20150923033459/http://www.chromium.org/Home/chromium-security/boringssl|archivedate=2015-09-23}}</ref> or by [[Software:Network Security Services|NSS]] for Linux. Google is switching the TLS library used in Chrome to BoringSSL from NSS completely.}}
| colspan="2" style="background:salmon;" | 1–9
| rowspan="16" | [[Software:Microsoft Windows|Windows&nbsp;<small>(7+)</small>]]<br />[[Software:MacOS|OS X&nbsp;<small>(10.10+)</small>]]<br />[[Software:Linux|Linux]]<br />[[Software:Android (operating system)|Android&nbsp;<small>(4.1+)</small>]]<br />[[Software:IOS|iOS&nbsp;<small>(9.0+)</small>]]<br />[[Software:Chrome OS|Chrome OS]]
| {{Yes|Disabled by default}}
| {{No|Enabled by default}}
| {{Yes}}
| {{No}}
| {{No}}
| {{No}}
| {{Yes}}<br /><small>(only desktop)</small>
| {{Partial|<small>needs SHA-2 compatible OS</small>}}<ref name="SHA-2"/>
| {{Partial|<small>needs ECC compatible OS</small>}}<ref name="ECC"/>
| {{Yes|Not affected<br /><ref name=ChromeBEAST>{{cite web|url=http://googlechromereleases.blogspot.jp/2011/10/chrome-stable-release.html|title=Chrome Stable Release|work=Chrome Releases|date=2011-10-25|accessdate=2015-02-01|url-status=live|archiveurl=https://web.archive.org/web/20150220020306/http://googlechromereleases.blogspot.jp/2011/10/chrome-stable-release.html|archivedate=2015-02-20}}</ref>}}
| {{No|Vulnerable<br /><small>(HTTPS)</small>}}
| {{No|Vulnerable}}
| {{No|Vulnerable}}
| {{No|Vulnerable<br /><small>(except Windows)</small>}}
| {{No|Vulnerable}}
| {{Yes|Yes<ref group="n" name="viasetting">configure enabling/disabling of each protocols via setting/option (menu name is dependent on browsers)</ref>}}
|-
| colspan="2" style="background:salmon;" | 10–20
| {{Yes|No}}<ref name="build.chromium.org">{{cite web|url=https://build.chromium.org/f/chromium/perf/dashboard/ui/changelog.html?url=/trunk/src&range=72316:67679&mode=html|archive-url=https://archive.today/20140619142454/http://build.chromium.org/f/chromium/perf/dashboard/ui/changelog.html?url=/trunk/src&range=72316:67679&mode=html|url-status=dead|archive-date=2014-06-19|title=SVN revision log on Chrome 10.0.648.127 release|accessdate=2014-06-19}}</ref>
| {{No|Enabled by default}}
| {{Yes}}
| {{No}}
| {{No}}
| {{No}}
| {{Yes}}<br /><small>(only desktop)</small>
| {{Partial|<small>needs SHA-2 compatible OS</small>}}<ref name="SHA-2"/>
| {{Partial|<small>needs ECC compatible OS</small>}}<ref name="ECC"/>
| {{Yes|Not affected}}
| {{No|Vulnerable<br /><small>(HTTPS/SPDY)</small>}}
| {{No|Vulnerable}}
| {{No|Vulnerable}}
| {{No|Vulnerable<br /><small>(except Windows)</small>}}
| {{No|Vulnerable}}
| {{Yes|Yes<ref group="n" name="viasetting"/>}}
|-
| colspan="2" style="background:salmon;" | 21
| {{Yes|No}}
| {{No|Enabled by default}}
| {{Yes}}
| {{No}}
| {{No}}
| {{No}}
| {{Yes}}<br /><small>(only desktop)</small>
| {{Partial|<small>needs SHA-2 compatible OS</small>}}<ref name="SHA-2"/>
| {{Partial|<small>needs ECC compatible OS</small>}}<ref name="ECC"/>
| {{Yes|Not affected}}
| {{Yes|Mitigated<br /><ref name="CRIME-Chrome=Firefox">{{cite web|url=https://www.imperialviolet.org/2012/09/21/crime.html|title=ImperialViolet – CRIME|date=2012-09-22|accessdate=2014-10-18|url-status=live|archiveurl=https://web.archive.org/web/20150110195746/https://www.imperialviolet.org/2012/09/21/crime.html|archivedate=2015-01-10}}</ref>}}
| {{No|Vulnerable}}
| {{No|Vulnerable}}
| {{No|Vulnerable<br /><small>(except Windows)</small>}}
| {{No|Vulnerable}}
| {{Yes|Yes<ref group="n" name="viasetting"/>}}
|-
| colspan="2" style="background:salmon;" | 22–29
| {{Yes|No}}
| {{No|Enabled by default}}
| {{Yes}}
| {{Yes}}<ref name="SSL/TLS Overview">{{cite web |url=https://sites.google.com/site/tlsssloverview/ssl-v-tls/tls-versions-and-browser-compatability |title=SSL/TLS Overview |date=2008-08-06 |accessdate=2013-03-29 |url-status=live |archiveurl=https://web.archive.org/web/20130703043525/https://sites.google.com/site/tlsssloverview/ssl-v-tls/tls-versions-and-browser-compatability |archivedate=2013-07-03}}</ref>
| {{No}}<ref name="SSL/TLS Overview" /><ref name="Chromium Issue 90392">{{cite web |url=https://code.google.com/p/chromium/issues/detail?id=90392 |title=Chromium Issue 90392 |date=2008-08-06 |accessdate=2013-06-28 |url-status=live |archiveurl=https://web.archive.org/web/20130803110745/http://code.google.com/p/chromium/issues/detail?id=90392 |archivedate=2013-08-03}}</ref><ref name="Issue 23503030 Merge 219882">{{cite web |url=https://codereview.chromium.org/23503030/ |title=Issue 23503030 Merge 219882 |date=2013-09-03 |accessdate=2013-09-19 |url-status=live |archiveurl=https://web.archive.org/web/20140226230020/https://codereview.chromium.org/23503030/ |archivedate=2014-02-26}}</ref><ref name="Issue 278370">{{cite web |url=http://code.google.com/p/chromium/issues/detail?id=278370 |title=Issue 278370: Unable to submit client certificates over TLS 1.2 from Windows |date=2013-08-23 |accessdate=2013-10-03 |url-status=live |archiveurl=https://web.archive.org/web/20131005021656/http://code.google.com/p/chromium/issues/detail?id=278370 |archivedate=2013-10-05}}</ref>
| {{No}}
| {{Yes}}<br /><small>(only desktop)</small>
| {{Partial|<small>needs SHA-2 compatible OS</small>}}<ref name="SHA-2"/>
| {{Partial|<small>needs ECC compatible OS</small>}}<ref name="ECC"/>
| {{Yes|Not affected}}
| {{Yes|Mitigated}}
| {{No|Vulnerable}}
| {{No|Vulnerable}}
| {{No|Vulnerable<br /><small>(except Windows)</small>}}
| {{No|Vulnerable}}
| {{Partial|Temporary<br /><ref group="n" name="viacommandline">configure the maximum and the minimum version of enabling protocols with command-line option</ref>}}
|-
| colspan="2" style="background:salmon;" | 30–32
| {{Yes|No}}
| {{No|Enabled by default}}
| {{Yes}}
| {{Yes}}
| {{Yes}}&#8203;<ref name="Chromium Issue 90392"/><ref name="Issue 23503030 Merge 219882"/><ref name="Issue 278370"/>
| {{No}}
| {{Yes}}<br /><small>(only desktop)</small>
| {{Partial|<small>needs SHA-2 compatible OS</small>}}<ref name="SHA-2"/>
| {{Partial|<small>needs ECC compatible OS</small>}}<ref name="ECC"/>
| {{Yes|Not affected}}
| {{Yes|Mitigated}}
| {{No|Vulnerable}}
| {{No|Vulnerable}}
| {{No|Vulnerable<br /><small>(except Windows)</small>}}
| {{No|Vulnerable}}
| {{Partial|Temporary<br /><ref group="n" name="viacommandline"/>}}
|-
| colspan="2" style="background:salmon;" | 33–37
| {{Yes|No}}
| {{No|Enabled by default}}
| {{Yes}}
| {{Yes}}
| {{Yes}}
| {{No}}
| {{Yes}}<br /><small>(only desktop)</small>
| {{Partial|<small>needs SHA-2 compatible OS</small>}}<ref name="SHA-2"/>
| {{Partial|<small>needs ECC compatible OS</small>}}<ref name="ECC"/>
| {{Yes|Not affected}}
| {{Yes|Mitigated}}
| {{Partial|Partly mitigated<br />{{refn |group="n" |name="note-Chrome33-POODLE"|TLS_FALLBACK_SCSV is implemented.<ref name="chrome-scsv">{{cite web |last=Möller |first=Bodo |title=This POODLE bites: exploiting the SSL 3.0 fallback |work=Google Online Security blog |publisher=Google (via Blogspot) |date=2014-10-14 |url=http://googleonlinesecurity.blogspot.com/2014/10/this-poodle-bites-exploiting-ssl-30.html |accessdate=2014-10-28 |url-status=live |archiveurl=https://web.archive.org/web/20141028003952/http://googleonlinesecurity.blogspot.com/2014/10/this-poodle-bites-exploiting-ssl-30.html |archivedate=2014-10-28}}</ref> Fallback to SSL 3.0 is disabled since version 39.<ref name="chrome-poodle">{{cite web |title=An update on SSLv3 in Chrome. |work=Security-dev |date=2014-10-31 |url=https://groups.google.com/a/chromium.org/forum/#!topic/security-dev/Vnhy9aKM_l4 |accessdate=2014-11-04}}</ref>}}}}
| {{Partial|Lowest priority<br /><ref name=Chrome33RC4>{{cite web|url=http://googlechromereleases.blogspot.com/2014/02/stable-channel-update_20.html|work=Mozilla Developer Network|title=Stable Channel Update|date=2014-02-20|accessdate=2014-11-14|url-status=live|archiveurl=https://web.archive.org/web/20141024210105/http://googlechromereleases.blogspot.com/2014/02/stable-channel-update_20.html|archivedate=2014-10-24}}</ref><ref name=Chrome33changelog>{{cite web|url=https://build.chromium.org/f/chromium/perf/dashboard/ui/changelog.html?url=/trunk/src&range=232870:241107&mode=html|archive-url=https://archive.today/20140116153037/http://build.chromium.org/f/chromium/perf/dashboard/ui/changelog.html?url=/trunk/src&range=232870:241107&mode=html|url-status=dead|archive-date=2014-01-16|work=Google|title=Changelog for Chrome 33.0.1750.117|accessdate=2014-11-14}}</ref><ref name=Issue318442>{{cite web|url=https://code.google.com/p/chromium/issues/detail?id=318442|title=Issue 318442: Update to NSS 3.15.3 and NSPR 4.10.2|accessdate=2014-11-14|url-status=live|archiveurl=https://web.archive.org/web/20150315043755/https://code.google.com/p/chromium/issues/detail?id=318442|archivedate=2015-03-15}}</ref>}}
| {{No|Vulnerable<br /><small>(except Windows)</small>}}
| {{No|Vulnerable}}
| {{Partial|Temporary<br /><ref group="n" name="viacommandline"/>}}
|-
| colspan="2" style="background:salmon;" | 38, 39
| {{Yes|No}}
| {{No|Enabled by default}}
| {{Yes}}
| {{Yes}}
| {{Yes}}
| {{No}}
| {{Yes}}<br /><small>(only desktop)</small>
| {{Yes}}
| {{Partial|<small>needs ECC compatible OS</small>}}<ref name="ECC"/>
| {{Yes|Not affected}}
| {{Yes|Mitigated}}
| {{Partial|Partly mitigated}}
| {{Partial|Lowest priority}}
| {{No|Vulnerable<br /><small>(except Windows)</small>}}
| {{No|Vulnerable}}
| {{Partial|Temporary<br /><ref group="n" name="viacommandline"/>}}
|-

| colspan="2" style="background:salmon;" | 40
| {{Yes|No}}
| {{Yes|Disabled by default}}&#8203;<ref name="chrome-poodle"/><ref name="chromium693963003">{{cite web |url=https://codereview.chromium.org/693963003 |title=Issue 693963003: Add minimum TLS version control to about:flags and Finch gate it. – Code Review |accessdate=2015-01-22 |url-status=live |archiveurl=https://web.archive.org/web/20150416072943/https://codereview.chromium.org/693963003 |archivedate=2015-04-16}}</ref>
| {{Yes}}
| {{Yes}}
| {{Yes}}
| {{No}}
| {{Yes}}<br /><small>(only desktop)</small>
| {{Yes}}
| {{Partial|<small>needs ECC compatible OS</small>}}<ref name="ECC"/>
| {{Yes|Not affected}}
| {{Yes|Mitigated}}
| {{Yes|Mitigated<br />{{refn |group="n" |name="note-Chrome40-POODLE"|In addition to TLS_FALLBACK_SCSV and disabling a fallback to SSL 3.0, SSL 3.0 itself is disabled by default.<ref name="chrome-poodle"/>}}}}
| {{Partial|Lowest priority}}
| {{No|Vulnerable<br /><small>(except Windows)</small>}}
| {{No|Vulnerable}}
| {{Yes|Yes{{refn|group="n"|name="chromeflags"|configure the minimum version of enabling protocols via chrome://flags<ref name="chromium693963003" /> (the maximum version can be configured with command-line option)}}}}
|-
| colspan="2" ! style="background:salmon;" | 41, 42
| {{Yes|No}}
| {{Yes|Disabled by default}}
| {{Yes}}
| {{Yes}}
| {{Yes}}
| {{No}}
| {{Yes}}<br /><small>(only desktop)</small>
| {{Yes}}
| {{Partial|<small>needs ECC compatible OS</small>}}<ref name="ECC"/>
| {{Yes|Not affected}}
| {{Yes|Mitigated}}
| {{Yes|Mitigated}}
| {{Partial|Lowest priority}}
| {{Yes|Mitigated}}
| {{No|Vulnerable}}
| {{Yes|Yes<ref group="n" name="chromeflags"/>}}
|-
| colspan="2" style="background:salmon;" | 43
| {{Yes|No}}
| {{Yes|Disabled by default}}
| {{Yes}}
| {{Yes}}
| {{Yes}}
| {{No}}
| {{Yes}}<br /><small>(only desktop)</small>
| {{Yes}}
| {{Partial|<small>needs ECC compatible OS</small>}}<ref name="ECC"/>
| {{Yes|Not affected}}
| {{Yes|Mitigated}}
| {{Yes|Mitigated}}
| {{Partial|Only as fallback<br /><ref group="n" name="RC4fallback"/><ref name="chromeissue375342">{{cite web |url=https://code.google.com/p/chromium/issues/detail?id=375342 |title=Issue 375342: Drop RC4 Support |accessdate=2015-05-22 |url-status=live |archiveurl=https://web.archive.org/web/20150912071452/https://code.google.com/p/chromium/issues/detail?id=375342 |archivedate=2015-09-12}}</ref>}}
| {{Yes|Mitigated}}
| {{No|Vulnerable}}
| {{Yes|Yes<ref group="n" name="chromeflags"/>}}
|-
 | colspan="2" style="background:salmon;" | 44–47
| {{Yes|No}}
| {{Yes|No}}<ref name="chromeissue436391">{{cite web |url=https://code.google.com/p/chromium/issues/detail?id=436391 |title=Issue 436391: Add info on end of life of SSLVersionFallbackMin & SSLVersionMin policy in documentation |accessdate=2015-04-19 |url-status=live |archiveurl=https://web.archive.org/web/20150418095600/http://code.google.com/p/chromium/issues/detail?id=436391 |archivedate=2015-04-18}}</ref>
| {{Yes}}
| {{Yes}}
| {{Yes}}
| {{No}}
| {{Yes}}<br /><small>(only desktop)</small>
| {{Yes}}
| {{Partial|<small>needs ECC compatible OS</small>}}<ref name="ECC"/>
| {{Yes|Not affected}}
| {{Yes|Mitigated}}
| {{Yes|Not affected}}
| {{Partial|Only as fallback<br /><ref group="n" name="RC4fallback"/>}}
| {{Yes|Mitigated}}
| {{Yes|Mitigated}}&#8203;<ref name="chromeissue490240">{{cite web |url=https://code.google.com/p/chromium/issues/detail?id=490240 |title=Issue 490240: Increase minimum DH size to 1024 bits (tracking bug) |accessdate=2015-05-29 |url-status=live |archiveurl=https://web.archive.org/web/20150912081831/https://code.google.com/p/chromium/issues/detail?id=490240 |archivedate=2015-09-12}}</ref>
| {{Partial|Temporary<br /><ref group="n" name="viacommandline"/>}}
|-
| colspan="2" style="background:salmon;" | 48, 49
| {{Yes|No}}
| {{Yes|No}}
| {{Yes}}
| {{Yes}}
| {{Yes}}
| {{No}}
| {{Yes}}<br /><small>(only desktop)</small>
| {{Yes}}
| {{Partial|<small>needs ECC compatible OS</small>}}<ref name="ECC"/>
| {{Yes|Not affected}}
| {{Yes|Mitigated}}
| {{Yes|Not affected}}
| {{Yes|Disabled by default}}&#8203;<ref group="n" name="RC4-disabled"/><ref name="RC4-Chrome48-1">{{cite web |url=https://groups.google.com/a/chromium.org/forum/#!msg/security-dev/kVfCywocUO8/2BW3INFdDwAJ |title=Intent to deprecate: RC4 |accessdate=2015-12-21}}</ref><ref name="RC4-Chrome48-2">{{cite web |url=https://googleonlinesecurity.blogspot.com/2015/12/an-update-on-sha-1-certificates-in.html |title=An update on SHA-1 certificates in Chrome |date=2015-12-18 |accessdate=2015-12-21 |url-status=live |archiveurl=https://web.archive.org/web/20151218214756/https://googleonlinesecurity.blogspot.com/2015/12/an-update-on-sha-1-certificates-in.html |archivedate=2015-12-18}}</ref>
| {{Yes|Mitigated}}
| {{Yes|Mitigated}}
| {{Partial|Temporary<br /><ref group="n" name="viacommandline"/>}}
|-
| colspan="2" style="background:salmon;" | 50–53
| {{Yes|No}}
| {{Yes|No}}
| {{Yes}}
| {{Yes}}
| {{Yes}}
| {{No}}
| {{Yes}}<br /><small>(only desktop)</small>
| {{Yes}}
| {{Yes}}
| {{Yes|Not affected}}
| {{Yes|Mitigated}}
| {{Yes|Not affected}}
| {{Yes|Disabled by default}}&#8203;<ref group="n" name="RC4-disabled"/><ref name="RC4-Chrome48-1"/><ref name="RC4-Chrome48-2"/>
| {{Yes|Mitigated}}
| {{Yes|Mitigated}}
| {{Partial|Temporary<br /><ref group="n" name="viacommandline"/>}}
|-
| colspan="2" style="background:salmon;" | 54–66
| {{Yes|No}}
| {{Yes|No}}
| {{Yes}}
| {{Yes}}
| {{Yes}}
| {{Partial|Disabled by default}}<br /><small>(draft version)</small>
| {{Yes}}<br /><small>(only desktop)</small>
| {{Yes}}
| {{Yes}}
| {{Yes|Not affected}}
| {{Yes|Mitigated}}
| {{Yes|Not affected}}
| {{Yes|Disabled by default}}&#8203;<ref group="n" name="RC4-disabled"/><ref name="RC4-Chrome48-1"/><ref name="RC4-Chrome48-2"/>
| {{Yes|Mitigated}}
| {{Yes|Mitigated}}
| {{Partial|Temporary<br /><ref group="n" name="viacommandline"/>}}
|-
| colspan="2" style="background:salmon;" | 67–69
| {{Yes|No}}
| {{Yes|No}}
| {{Yes}}
| {{Yes}}
| {{Yes}}
| {{Partial|Yes}}<br /><small>(draft version)</small>
| {{Yes}}<br /><small>(only desktop)</small>
| {{Yes}}
| {{Yes}}
| {{Yes|Not affected}}
| {{Yes|Mitigated}}
| {{Yes|Not affected}}
| {{Yes|Disabled by default}}&#8203;<ref group="n" name="RC4-disabled"/><ref name="RC4-Chrome48-1"/><ref name="RC4-Chrome48-2"/>
| {{Yes|Mitigated}}
| {{Yes|Mitigated}}
| {{Partial|Temporary<br /><ref group="n" name="viacommandline"/>}}
|-
| style="background:salmon;" | 70–74
| style="background:#a0e75a;" | 75
| {{Yes|No}}
| {{Yes|No}}
| {{Yes}}
| {{Yes}}
| {{Yes}}
| {{Yes}}
| {{Yes}}<br /><small>(only desktop)</small>
| {{Yes}}
| {{Yes}}
| {{Yes|Not affected}}
| {{Yes|Mitigated}}
| {{Yes|Not affected}}
| {{Yes|Disabled by default}}&#8203;<ref group="n" name="RC4-disabled"/><ref name="RC4-Chrome48-1"/><ref name="RC4-Chrome48-2"/>
| {{Yes|Mitigated}}
| {{Yes|Mitigated}}
| {{Partial|Temporary<br /><ref group="n" name="viacommandline"/>}}
|-
! Browser
! colspan="2" | Version
! Platforms
! SSL 2.0 (insecure)
! SSL 3.0 (insecure)
! TLS 1.0
! TLS 1.1
! TLS 1.2
! TLS 1.3
! EV certificate
! SHA-2 certificate
! ECDSA certificate
! BEAST
! CRIME
! POODLE (SSLv3)
! RC4
! FREAK
! Logjam
! Protocol selection by user
|-
! rowspan="10" | Google Android OS Browser<br /><ref name=android-tls>{{cite web|url=https://developer.android.com/reference/javax/net/ssl/SSLSocket.html|title=SSLSocket {{!}} Android Developers|accessdate=2015-03-11|url-status=live|archiveurl=https://web.archive.org/web/20150318121117/http://developer.android.com/reference/javax/net/ssl/SSLSocket.html|archivedate=2015-03-18}}</ref>
| colspan="3" style="background:salmon;" | Android [[Engineering:Android version history|1.0–2.3.7]]
| {{Yes|No}}
| {{No|Enabled by default}}
| {{Yes}}
| {{No}}
| {{No}}
| {{No}}
| {{unknown}}
| {{Yes}}<ref name="SHA-2"/>
| {{No}}
| {{unknown}}
| {{unknown}}
| {{No|Vulnerable}}
| {{No|Vulnerable}}
| {{No|Vulnerable}}
| {{No|Vulnerable}}
| {{No}}
|-
| colspan="3" style="background:salmon;" | Android [[Engineering:Android version history|3.0–4.0.4]]
| {{Yes|No}}
| {{No|Enabled by default}}
| {{Yes}}
| {{No}}
| {{No}}
| {{No}}
| {{unknown}}
| {{Yes}}
| {{Yes}}<ref name="ECC2">{{cite web|title=What browsers work with Universal SSL|accessdate=2015-06-15|url=https://support.cloudflare.com/hc/en-us/articles/203041594-What-browsers-work-with-Universal-SSL|url-status=live|archiveurl=https://web.archive.org/web/20160304023941/https://support.cloudflare.com/hc/en-us/articles/203041594-What-browsers-work-with-Universal-SSL|archivedate=2016-03-04}}</ref><ref name="ECC"/>
| {{unknown}}
| {{unknown}}
| {{No|Vulnerable}}
| {{No|Vulnerable}}
| {{No|Vulnerable}}
| {{No|Vulnerable}}
| {{No}}
|-
| colspan="3" style="background:salmon;" | Android [[Engineering:Android version history|4.1–4.4.4]]
| {{Yes|No}}
| {{No|Enabled by default}}
| {{Yes}}
| {{Partial|Disabled by default}}&#8203;<ref name="Android-SSLSocket">{{cite web |url=http://developer.android.com/reference/javax/net/ssl/SSLSocket.html |title=SSLSocket {{!}} Android Developers |accessdate=2015-12-17 |url-status=live |archiveurl=https://web.archive.org/web/20160304202641/https://developer.android.com/reference/javax/net/ssl/SSLSocket.html |archivedate=2016-03-04}}</ref>
| {{Partial|Disabled by default}}&#8203;<ref name="Android-SSLSocket"/>
| {{No}}
| {{unknown}}
| {{Yes}}
| {{Yes}}
| {{unknown}}
| {{unknown}}
| {{No|Vulnerable}}
| {{No|Vulnerable}}
| {{No|Vulnerable}}
| {{No|Vulnerable}}
| {{No}}
|-
| colspan="3" style="background:salmon;" | Android [[Software:Android Lollipop|5.0–5.0.2]]
| {{Yes|No}}
| {{No|Enabled by default}}
| {{Yes}}
| {{Yes}}<ref name="Android-SSLSocket"/><ref name=android-5-tls>{{cite web|url=http://developer.android.com/about/versions/android-5.0-changes.html#ssl|title=Android 5.0 Behavior Changes {{!}} Android Developers|accessdate=2015-03-11|url-status=live|archiveurl=https://web.archive.org/web/20150309000956/http://developer.android.com/about/versions/android-5.0-changes.html#ssl|archivedate=2015-03-09}}</ref>
| {{Yes}}<ref name="Android-SSLSocket"/><ref name=android-5-tls/>
| {{No}}
| {{unknown}}
| {{Yes}}
| {{Yes}}
| {{unknown}}
| {{unknown}}
| {{No|Vulnerable}}
| {{No|Vulnerable}}
| {{No|Vulnerable}}
| {{No|Vulnerable}}
| {{No}}
|-
| colspan="3" style="background:salmon;" | Android [[Software:Android Lollipop|5.1–5.1.1]]
| {{Yes|No}}
| {{Partial|Disabled by default}}<br /><small> </small>
| {{Yes}}
| {{Yes}}
| {{Yes}}
| {{No}}
| {{unknown}}
| {{Yes}}
| {{Yes}}
| {{unknown}}
| {{unknown}}
| {{Yes|Not affected}}
| {{Partial|Only as fallback<br /><ref group="n" name="RC4fallback"/>}}
| {{Yes|Mitigated}}
| {{Yes|Mitigated}}
| {{No}}
|-
| colspan="3" style="background:salmon;" | Android [[Software:Android Marshmallow|6.0–6.0.1]]
| rowspan="2" ! {{Yes|No}}
| rowspan="2" ! {{Partial|Disabled by default}}<br /><small> </small>
| rowspan="2" ! {{Yes}}
| rowspan="2" ! {{Yes}}
| rowspan="2" ! {{Yes}}
| rowspan="2" ! {{No}}
| rowspan="2" ! {{unknown}}
| rowspan="2" ! {{Yes}}
| rowspan="2" ! {{Yes}}
| rowspan="2" ! {{unknown}}
| rowspan="2" ! {{unknown}}
| rowspan="2" ! {{Yes|Not affected}}
| rowspan="2" ! {{Yes|Disabled by default}}
| rowspan="2" ! {{Yes|Mitigated}}
| rowspan="2" ! {{Yes|Mitigated}}
| rowspan="2" ! {{No}}
|-
| colspan="3" style="background:khaki;" | Android [[Software:Android Nougat|7.0–7.1.2]]
|-
| colspan="3" style="background:khaki;" | Android [[Software:Android Oreo|8.0–8.1]]
| rowspan="2" ! {{Yes|No}}
| rowspan="2" ! {{Yes|No}}<br /><ref name="Android 8.0 Behavior Changes">{{cite web|url=https://developer.android.com/about/versions/oreo/android-8.0-changes.html|title=Android 8.0 Behavior Changes|url-status=live|archiveurl=https://web.archive.org/web/20171201042705/https://developer.android.com/about/versions/oreo/android-8.0-changes.html|archivedate=2017-12-01}}</ref>
| rowspan="2" ! {{Yes}}
| rowspan="2" ! {{Yes}}
| rowspan="2" ! {{Yes}}
| rowspan="2" ! {{No}}
| rowspan="2" ! {{unknown}}
| rowspan="2" ! {{Yes}}
| rowspan="2" ! {{Yes}}
| rowspan="2" ! {{unknown}}
| rowspan="2" ! {{unknown}}
| rowspan="2" ! {{Yes|Not affected}}
| rowspan="2" ! {{Yes|Disabled by default}}
| rowspan="2" ! {{Yes|Mitigated}}
| rowspan="2" ! {{Yes|Mitigated}}
| rowspan="2" ! {{No}}
|-
| colspan="3" style="background:#a0e75a;" | Android [[Software:Android Pie|9.0]]
|-
| colspan="3" {{table-experimental| Android [[Software:Android 10|10.0]]}}
| {{Yes|No}}
| {{Yes|No}}
| {{Yes}}
| {{Yes}}
| {{Yes}}
| {{unknown}}
| {{unknown}}
| {{Yes}}
| {{Yes}}
| {{unknown}}
| {{unknown}}
| {{Yes|Not affected}}
| {{Yes|Disabled by default}}
| {{Yes|Mitigated}}
| {{Yes|Mitigated}}
| {{No}}
|-
! Browser
! colspan="2" | Version
! Platforms
! SSL 2.0 (insecure)
! SSL 3.0 (insecure)
! TLS 1.0
! TLS 1.1
! TLS 1.2
! TLS 1.3
! EV certificate
! SHA-2 certificate
! ECDSA certificate
! BEAST
! CRIME
! POODLE (SSLv3)
! RC4
! FREAK
! Logjam
! Protocol selection by user
|-
! rowspan="20" | [[Software:Firefox|Mozilla Firefox]]<br /><small>(Firefox for mobile)</small><br />{{refn | group="n" | name="note-c" | Uses the TLS implementation provided by [[Software:Network Security Services|NSS]]. As of Firefox 22, Firefox supports only TLS 1.0 despite the bundled NSS supporting TLS 1.1. Since Firefox 23, TLS 1.1 can be enabled, but was not enabled by default due to issues. Firefox 24 has TLS 1.2 support disabled by default. TLS 1.1 and TLS 1.2 have been enabled by default in Firefox 27 release.}}
| colspan="2" style="background:salmon;" | 1.0, 1.5
| rowspan="20" | [[Software:Microsoft Windows|Windows&nbsp;<small>(7+)</small>]]<br /> [[Software:MacOS|OS X&nbsp;<small>(10.9+)</small>]]<br /> [[Software:Linux|Linux]]<br />Android&nbsp;<small>(4.1+)</small><br />[[Software:IOS|iOS <small>(9.0+)</small>]]<br /><s>[[Software:Firefox OS|Firefox OS]]</s><br /><s>[[Software:Maemo|Maemo]]</s><br /><br />ESR only for:<br />[[Software:Microsoft Windows|Windows&nbsp;<small>(7+)</small>]]<br />[[Software:MacOS|OS X&nbsp;<small>(10.9+)</small>]]<br /> [[Software:Linux|Linux]]
| {{No|Enabled by default}}<br /><ref name="SecurityinFirefox">{{cite web |url=https://developer.mozilla.org/en-US/Firefox/Releases/2/Security_changes |title=Security in Firefox 2 |date=2008-08-06 |accessdate=2009-03-31 |url-status=live |archiveurl=https://web.archive.org/web/20140714142705/https://developer.mozilla.org/en-US/Firefox/Releases/2/Security_changes |archivedate=2014-07-14}}</ref>
| {{No|Enabled by default}}<br /><ref name="SecurityinFirefox"/>
| {{Yes}}<ref name="SecurityinFirefox"/>
| {{No}}
| {{No}}
| {{No}}
| {{No}}
| {{Yes}}<ref name="SHA-2"/>
| {{No}}
| {{Yes|Not affected<br /><ref name=FirefoxBEAST>{{cite web|url=https://blog.mozilla.org/security/2011/09/27/attack-against-tls-protected-communications/|title=Attack against TLS-protected communications|work=Mozilla Security Blog|publisher=Mozilla|date=2011-09-27|accessdate=2015-02-01|url-status=live|archiveurl=https://web.archive.org/web/20150304221307/https://blog.mozilla.org/security/2011/09/27/attack-against-tls-protected-communications/|archivedate=2015-03-04}}</ref>}}
| {{Yes|Not affected}}
| {{No|Vulnerable}}
| {{No|Vulnerable}}
| {{Yes|Not affected}}
| {{No|Vulnerable}}
| {{Yes|Yes<ref group="n" name="viasetting"/>}}
|-
| colspan="2" style="background:salmon;" | 2
| {{Yes|Disabled by default}}<br /><ref name="SecurityinFirefox"/><ref name="FxSSL2">{{cite web|url=https://developer.mozilla.org/en-US/docs/Introduction_to_SSL|title=Introduction to SSL|publisher=MDN|accessdate=2014-06-19|url-status=live|archiveurl=https://web.archive.org/web/20140714205945/https://developer.mozilla.org/en-US/docs/Introduction_to_SSL|archivedate=2014-07-14}}</ref>
| {{No|Enabled by default}}
| {{Yes}}
| {{No}}
| {{No}}
| {{No}}
| {{No}}
| {{Yes}}
| {{Yes}}<ref name="ECC"/>
| {{Yes|Not affected}}
| {{Yes|Not affected}}
| {{No|Vulnerable}}
| {{No|Vulnerable}}
| {{Yes|Not affected}}
| {{No|Vulnerable}}
| {{Yes|Yes<ref group="n" name="viasetting"/>}}
|-
| colspan="2" style="background:salmon;" | 3–7
| {{Yes|Disabled by default}}
| {{No|Enabled by default}}
| {{Yes}}
| {{No}}
| {{No}}
| {{No}}
| {{Yes}}
| {{Yes}}
| {{Yes}}
| {{Yes|Not affected}}
| {{Yes|Not affected}}
| {{No|Vulnerable}}
| {{No|Vulnerable}}
| {{Yes|Not affected}}
| {{No|Vulnerable}}
| {{Yes|Yes<ref group="n" name="viasetting"/>}}
|-
| colspan="2" style="background:salmon;" | 8–10<br />{{nowrap|ESR 10}}
| {{Yes|No}}<ref name="FxSSL2"/>
| {{No|Enabled by default}}
| {{Yes}}
| {{No}}
| {{No}}
| {{No}}
| {{Yes}}
| {{Yes}}
| {{Yes}}
| {{Yes|Not affected}}
| {{Yes|Not affected}}
| {{No|Vulnerable}}
| {{No|Vulnerable}}
| {{Yes|Not affected}}
| {{No|Vulnerable}}
| {{Yes|Yes<ref group="n" name="viasetting"/>}}
|-
| colspan="2" style="background:salmon;" | 11–14
| {{Yes|No}}
| {{No|Enabled by default}}
| {{Yes}}
| {{No}}
| {{No}}
| {{No}}
| {{Yes}}
| {{Yes}}
| {{Yes}}
| {{Yes|Not affected}}
| {{No|Vulnerable<br /><small>(SPDY)</small><ref name="CRIME-Chrome=Firefox"/>}}
| {{No|Vulnerable}}
| {{No|Vulnerable}}
| {{Yes|Not affected}}
| {{No|Vulnerable}}
| {{Yes|Yes<ref group="n" name="viasetting"/>}}
|-
| colspan="2" style="background:salmon;" | 15–22<br />{{nowrap|ESR 17.0–17.0.10}}
| {{Yes|No}}
| {{No|Enabled by default}}
| {{Yes}}
| {{No}}
| {{No}}
| {{No}}
| {{Yes}}
| {{Yes}}
| {{Yes}}
| {{Yes|Not affected}}
| {{Yes|Mitigated}}
| {{No|Vulnerable}}
| {{No|Vulnerable}}
| {{Yes|Not affected}}
| {{No|Vulnerable}}
| {{Yes|Yes<ref group="n" name="viasetting"/>}}
|-
| colspan="2" style="background:salmon;" | {{nowrap|ESR 17.0.11}}
| {{Yes|No}}
| {{No|Enabled by default}}
| {{Yes}}
| {{No}}
| {{No}}
| {{No}}
| {{Yes}}
| {{Yes}}
| {{Yes}}
| {{Yes|Not affected}}
| {{Yes|Mitigated}}
| {{No|Vulnerable}}
| {{Partial|Lowest priority<br /><ref name="NSS-3.15.3" /><ref name="mfsa2013-103" />}}
| {{Yes|Not affected}}
| {{No|Vulnerable}}
| {{Yes|Yes<ref group="n" name="viasetting" />}}
|-
| colspan="2" style="background:salmon;" | 23
| {{Yes|No}}
| {{No|Enabled by default}}
| {{Yes}}
| {{Partial|Disabled by default}}<br /><ref name="Bug565047">{{cite web |url=https://bugzilla.mozilla.org/show_bug.cgi?id=565047 |title=Bug 565047 – (RFC4346) Implement TLS 1.1 (RFC 4346) |accessdate=2013-10-29}}</ref>
| {{No}}
| {{No}}
| {{Yes}}
| {{Yes}}
| {{Yes}}
| {{Yes|Not affected}}
| {{Yes|Mitigated}}
| {{No|Vulnerable}}
| {{No|Vulnerable}}
| {{Yes|Not affected}}
| {{No|Vulnerable}}
| {{Yes|Yes{{refn|group="n"|name="aboutconfig"|configure the maximum and the minimum version of enabling protocols via about:config}}}}
|-
| colspan="2" style="background:salmon;" | 24, 25.0.0<br />{{nowrap|ESR 24.0–24.1.0}}
| {{Yes|No}}
| {{No|Enabled by default}}
| {{Yes}}
| {{Partial|Disabled by default}}
| {{Partial|Disabled by default}}<br /><ref name="Bug480514">{{cite web|url=https://bugzilla.mozilla.org/show_bug.cgi?id=480514 |title=Bug 480514 – Implement support for TLS 1.2 (RFC 5246) |accessdate=2013-10-29}}</ref>
| {{No}}
| {{Yes}}
| {{Yes}}
| {{Yes}}
| {{Yes|Not affected}}
| {{Yes|Mitigated}}
| {{No|Vulnerable}}
| {{No|Vulnerable}}
| {{Yes|Not affected}}
| {{No|Vulnerable}}
| {{Yes|Yes<ref group="n" name="aboutconfig"/>}}
|-
| colspan="2" style="background:salmon;" | 25.0.1, 26<br />{{nowrap|ESR 24.1.1}}
| {{Yes|No}}
| {{No|Enabled by default}}
| {{Yes}}
| {{Partial|Disabled by default}}
| {{Partial|Disabled by default}}
| {{No}}
| {{Yes}}
| {{Yes}}
| {{Yes}}
| {{Yes|Not affected}}
| {{Yes|Mitigated}}
| {{No|Vulnerable}}
| {{Partial|Lowest priority<br /><ref name="NSS-3.15.3">{{cite web |url=https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.15.3_release_notes |work=Mozilla Developer Network |title=NSS 3.15.3 Release Notes |publisher=Mozilla |accessdate=2014-07-13 |url-status=live |archiveurl=https://web.archive.org/web/20140605001016/https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.15.3_release_notes |archivedate=2014-06-05}}</ref><ref name="mfsa2013-103">{{cite web |url=https://www.mozilla.org/security/announce/2013/mfsa2013-103.html |work=Mozilla |title=MFSA 2013-103: Miscellaneous Network Security Services (NSS) vulnerabilities |publisher=Mozilla |accessdate=2014-07-13 |url-status=live |archiveurl=https://web.archive.org/web/20140714121632/http://www.mozilla.org/security/announce/2013/mfsa2013-103.html |archivedate=2014-07-14}}</ref>}}
| {{Yes|Not affected}}
| {{No|Vulnerable}}
| {{Yes|Yes<ref group="n" name="aboutconfig"/>}}
|-
| colspan="2" style="background:salmon;" | 27–33<br />{{nowrap|ESR 31.0–31.2}}
| {{Yes|No}}
| {{No|Enabled by default}}
| {{Yes}}
| {{Yes}}&#8203;<ref name="Bug733647">{{cite web |url=https://bugzilla.mozilla.org/show_bug.cgi?id=733647 |title=Bug 733647 – Implement TLS 1.1 (RFC 4346) in Gecko (Firefox, Thunderbird), on by default |accessdate=2013-12-04}}</ref><ref name="Fx27">{{cite web |url=https://website-archive.mozilla.org/www.mozilla.org/firefox_releasenotes/en-US/firefox/27.0/releasenotes/ |title=Firefox Notes – Desktop |date=2014-02-04 |accessdate=2014-02-04 |url-status=live |archiveurl=https://web.archive.org/web/20140207095334/https://website-archive.mozilla.org/www.mozilla.org/firefox_releasenotes/en-US/firefox/27.0/releasenotes/ |archivedate=2014-02-07}}</ref>
| {{Yes}}&#8203;<ref name="Bug861266">{{cite web |url=https://bugzilla.mozilla.org/show_bug.cgi?id=861266 |title=Bug 861266 – Implement TLS 1.2 (RFC 5246) in Gecko (Firefox, Thunderbird), on by default |accessdate=2013-11-18}}</ref><ref name="Fx27"/>
| {{No}}
| {{Yes}}
| {{Yes}}
| {{Yes}}
| {{Yes|Not affected}}
| {{Yes|Mitigated}}
| {{No|Vulnerable}}
| {{Partial|Lowest priority}}
| {{Yes|Not affected}}
| {{No|Vulnerable}}
| {{Yes|Yes<ref group="n" name="aboutconfig"/>}}
|-
| colspan="2" style="background:salmon;" | 34, 35<br />{{nowrap|ESR 31.3–31.7}}
| {{Yes|No}}
| {{Yes|Disabled by default}}<br /><ref name="firefox-poodle">{{cite web |title=The POODLE Attack and the End of SSL 3.0 |work=Mozilla blog |publisher=Mozilla |date=2014-10-14 |url=https://blog.mozilla.org/security/2014/10/14/the-poodle-attack-and-the-end-of-ssl-3-0/ |accessdate=2014-10-28 |url-status=live |archiveurl=https://web.archive.org/web/20141018231351/https://blog.mozilla.org/security/2014/10/14/the-poodle-attack-and-the-end-of-ssl-3-0/ |archivedate=2014-10-18}}</ref><ref name="Fx34">{{cite web|url=https://www.mozilla.org/en-US/firefox/34.0/releasenotes/|title=Firefox — Notes (34.0) — Mozilla|publisher=mozilla.org|date=2014-12-01|accessdate=2015-04-03|url-status=live|archiveurl=https://web.archive.org/web/20150409022558/https://www.mozilla.org/en-US/firefox/34.0/releasenotes/|archivedate=2015-04-09}}</ref>
| {{Yes}}
| {{Yes}}
| {{Yes}}
| {{No}}
| {{Yes}}
| {{Yes}}
| {{Yes}}
| {{Yes|Not affected}}
| {{Yes|Mitigated}}
| {{Yes|Mitigated<br />{{refn |group="n" |name="Fx-POODLE"|SSL 3.0 itself is disabled by default.<ref name="firefox-poodle"/> In addition, fallback to SSL 3.0 is disabled since version 34,<ref name="firefox-fallback-disabled">{{cite web|url=https://bugzilla.mozilla.org/show_bug.cgi?id=1083058|title=Bug 1083058 – A pref to control TLS version fallback |publisher=bugzilla.mozilla.org|accessdate=2014-11-06}}</ref> and TLS_FALLBACK_SCSV is implemented since 35.0 and ESR 31.3.<ref name="firefox-poodle"/><ref name="bugzilla.mozilla.org">{{cite web|url=https://bugzilla.mozilla.org/show_bug.cgi?id=1036737|title=Bug 1036737 – Add support for draft-ietf-tls-downgrade-scsv to Gecko/Firefox |publisher=bugzilla.mozilla.org|accessdate=2014-10-29}}</ref>}}}}
| {{Partial|Lowest priority}}
| {{Yes|Not affected}}
| {{No|Vulnerable}}
| {{Yes|Yes<ref group="n" name="aboutconfig"/>}}
|-
| colspan="2" style="background:salmon;" | {{nowrap|ESR 31.8}}
| {{Yes|No}}
| {{Yes|Disabled by default}}
| {{Yes}}
| {{Yes}}
| {{Yes}}
| {{No}}
| {{Yes}}
| {{Yes}}
| {{Yes}}
| {{Yes|Not affected}}
| {{Yes|Mitigated}}
| {{Yes|Mitigated}}
| {{Partial|Lowest priority}}
| {{Yes|Not affected}}
| {{Yes|Mitigated&#8203;<ref name="FxLogjam"/>}}
| {{Yes|Yes<ref group="n" name="aboutconfig"/>}}
|-
| colspan="2" style="background:salmon;" | 36–38<br />{{nowrap|ESR 38.0}}
| {{Yes|No}}
| {{Yes|Disabled by default}}
| {{Yes}}
| {{Yes}}
| {{Yes}}
| {{No}}
| {{Yes}}
| {{Yes}}
| {{Yes}}
| {{Yes|Not affected}}
| {{Yes|Mitigated}}
| {{Yes|Mitigated}}
| {{Partial|Only as fallback<br /><ref group="n" name="RC4fallback">Only when no cipher suites with other than RC4 is available, cipher suites with RC4 will be used as a fallback.</ref><ref name="https">{{cite web|url=https://bugzilla.mozilla.org/show_bug.cgi?id=1088915|title=Bug 1088915 – Stop offering RC4 in the first handshakes |publisher=bugzilla.mozilla.org|accessdate=2014-11-04}}</ref>}}
| {{Yes|Not affected}}
| {{No|Vulnerable}}
| {{Yes|Yes<ref group="n" name="aboutconfig"/>}}
|-
| colspan="2" style="background:salmon;" | {{nowrap|ESR 38.1–38.8}}
| {{Yes|No}}
| {{Yes|Disabled by default}}
| {{Yes}}
| {{Yes}}
| {{Yes}}
| {{No}}
| {{Yes}}
| {{Yes}}
| {{Yes}}
| {{Yes|Not affected}}
| {{Yes|Mitigated}}
| {{Yes|Mitigated}}
| {{Partial|Only as fallback<br /><ref group="n" name="RC4fallback"/>}}
| {{Yes|Not affected}}
| {{Yes|Mitigated&#8203;<ref name="FxLogjam"/>}}
| {{Yes|Yes<ref group="n" name="aboutconfig"/>}}
|-
| colspan="2" style="background:salmon;" | 39–43
| {{Yes|No}}
| {{Yes|No}}<ref name="Fx39">{{cite web|url=https://www.mozilla.org/en-US/firefox/39.0/releasenotes/|title=Firefox — Notes (39.0) — Mozilla|publisher=mozilla.org|date=2015-06-30|accessdate=2015-07-03|url-status=live|archiveurl=https://web.archive.org/web/20150703163249/https://www.mozilla.org/en-US/firefox/39.0/releasenotes/|archivedate=2015-07-03}}</ref>
| {{Yes}}
| {{Yes}}
| {{Yes}}
| {{No}}
| {{Yes}}
| {{Yes}}
| {{Yes}}
| {{Yes|Not affected}}
| {{Yes|Mitigated}}
| {{Yes|Not affected}}
| {{Partial|Only as fallback<br /><ref group="n" name="RC4fallback"/>}}
| {{Yes|Not affected}}
| {{Yes|Mitigated}}&#8203;<ref name="FxLogjam">{{cite web |url=https://bugzilla.mozilla.org/show_bug.cgi?id=1166031 |title=Bug 1166031 – Update to NSS 3.19.1 |publisher=bugzilla.mozilla.org |accessdate=2015-05-29}}</ref>
| {{Yes|Yes<ref group="n" name="aboutconfig"/>}}
|-
| colspan="2" style="background:salmon;" | 44–48 <br /> {{nowrap|ESR 45}}
| {{Yes|No}}
| {{Yes|No}}
| {{Yes}}
| {{Yes}}
| {{Yes}}
| {{No}}
| {{Yes}}
| {{Yes}}
| {{Yes}}
| {{Yes|Not affected}}
| {{Yes|Mitigated}}
| {{Yes|Not affected}}
| {{Yes|Disabled by default}}&#8203;<ref group="n" name="RC4-disabled">All RC4 cipher suites are disabled by default.</ref><ref name="RC4Fx">{{cite news |url=https://venturebeat.com/2015/09/01/google-microsoft-and-mozilla-will-drop-rc4-support-in-chrome-edge-ie-and-firefox-next-year/ |title=Google, Microsoft, and Mozilla will drop RC4 encryption in Chrome, Edge, IE, and Firefox next year |work=VentureBeat |date=2015-09-01 |accessdate=2015-09-05 |url-status=live |archiveurl=https://web.archive.org/web/20150905214154/http://venturebeat.com/2015/09/01/google-microsoft-and-mozilla-will-drop-rc4-support-in-chrome-edge-ie-and-firefox-next-year/ |archivedate=2015-09-05}}</ref><ref name="RC4Fx-2">{{cite web |url=https://groups.google.com/forum/#!searchin/mozilla.dev.platform/rc4/mozilla.dev.platform/JIEFcrGhqSM/CIjtpwxoLQAJ |title=Intent to ship: RC4 disabled by default in Firefox 44 |accessdate=2015-10-18 |url-status=live |archiveurl=http://arquivo.pt/wayback/20110122130054/https://groups.google.com/forum/#!searchin/mozilla.dev.platform/rc4/mozilla.dev.platform/JIEFcrGhqSM/CIjtpwxoLQAJ |archivedate=2011-01-22}}</ref><ref name="RC4Fx-3">{{cite web |url=https://www.fxsitecompat.com/en-US/docs/2015/rc4-is-now-allowed-only-on-whitelisted-sites/ |title=RC4 is now allowed only on whitelisted sites (Reverted) |accessdate=2015-11-02}}</ref><ref name="Fx44">{{cite web |url=https://www.mozilla.org/en-US/firefox/44.0/releasenotes/ |title=Firefox — Notes (44.0) — Mozilla |publisher=mozilla.org |date=2016-01-26 |accessdate=2016-03-09 |url-status=live |archiveurl=https://web.archive.org/web/20160304025010/https://www.mozilla.org/en-US/firefox/44.0/releasenotes/ |archivedate=2016-03-04}}</ref>
| {{Yes|Not affected}}
| {{Yes|Mitigated}}
| {{Yes|Yes<ref group="n" name="aboutconfig"/>}}
|-
| colspan="2" style="background:salmon;" | 49–59<br />{{nowrap|ESR 52}}
| {{Yes|No}}
| {{Yes|No}}
| {{Yes}}
| {{Yes}}
| {{Yes}}
| {{Partial|Disabled by default}}<br /><small>(draft version)</small>&#8203;<ref>{{cite web |url=https://bugzilla.mozilla.org/show_bug.cgi?id=1342082 |title=Bug 1342082 – Disable TLS 1.3 for FF52 Release |accessdate=2017-03-29}}</ref>
| {{Yes}}
| {{Yes}}
| {{Yes}}
| {{Yes|Not affected}}
| {{Yes|Mitigated}}
| {{Yes|Not affected}}
| {{Yes|Disabled by default}}&#8203;<ref group="n" name="RC4-disabled"/>
| {{Yes|Not affected}}
| {{Yes|Mitigated}}
| {{Yes|Yes<ref group="n" name="aboutconfig"/>}}
|-
| style="background:salmon; padding-left:1px; padding-right:1px;" | 60–62<br />{{nowrap|ESR 60.0–60.7}}
| style="background:khaki; padding-left:1px; padding-right:1px;" | {{nowrap|ESR 60.8}}
| {{Yes|No}}
| {{Yes|No}}
| {{Yes}}
| {{Yes}}
| {{Yes}}
| {{Partial|Yes}}<br /><small>(draft version)</small>
| {{Yes}}
| {{Yes}}
| {{Yes}}
| {{Yes|Not affected}}
| {{Yes|Mitigated}}
| {{Yes|Not affected}}
| {{Yes|Disabled by default}}&#8203;<ref group="n" name="RC4-disabled"/>
| {{Yes|Not affected}}
| {{Yes|Mitigated}}
| {{Yes|Yes<ref group="n" name="aboutconfig"/>}}
|-
| style="background:salmon;" | 63–67
| style="background:#a0e75a;" | 68<br />{{nowrap|ESR 68.0}}
| {{Yes|No}}
| {{Yes|No}}
| {{Yes}}
| {{Yes}}
| {{Yes}}
| {{Yes}}
| {{Yes}}
| {{Yes}}
| {{Yes}}
| {{Yes|Not affected}}
| {{Yes|Mitigated}}
| {{Yes|Not affected}}
| {{Yes|Disabled by default}}&#8203;<ref group="n" name="RC4-disabled"/>
| {{Yes|Not affected}}
| {{Yes|Mitigated}}
| {{Yes|Yes<ref group="n" name="aboutconfig"/>}}
|-
! Browser
! colspan="2" | Version
! Platforms
! SSL 2.0 (insecure)
! SSL 3.0 (insecure)
! TLS 1.0
! TLS 1.1
! TLS 1.2
! TLS 1.3
! EV certificate
! SHA-2 certificate
! ECDSA certificate
! BEAST
! CRIME
! POODLE (SSLv3)
! RC4
! FREAK
! Logjam
! Protocol selection by user
|-
! rowspan="16" | [[Software:Internet Explorer|Microsoft Internet Explorer]]<br />{{refn |group="n" |name="note-d" |IE uses the TLS implementation of the Microsoft Windows operating system provided by the SChannel security support provider. TLS 1.1 and 1.2 are disabled by default until IE11.<ref name="Microsoft">{{cite web |author=Microsoft |url=https://msdn.microsoft.com/en-us/library/aa380123.aspx |title=Secure Channel |date=2012-09-05 |accessdate=2012-10-18 |url-status=live |archiveurl=https://web.archive.org/web/20120829025314/http://msdn.microsoft.com/en-us/library/aa380123.aspx |archivedate=2012-08-29}}</ref><ref name="msdn.microsoft.com">{{cite web |author=Microsoft |url=https://msdn.microsoft.com/en-us/library/dd208005.aspx |title=MS-TLSP Appendix A |date=2009-02-27 |accessdate=2009-03-19 |url-status=live |archiveurl=https://web.archive.org/web/20130927055954/http://msdn.microsoft.com/en-us/library/dd208005.aspx |archivedate=2013-09-27}}</ref>}}
| colspan="2" style="background:salmon;" | [[Software:Internet Explorer 1|1.x]]
| style="background:salmon;" ! rowspan="3"| Windows [[Software:Windows 3.1x|3.1]], [[Software:Windows 95|95]], [[Software:Windows NT|NT]],<ref group="n" name="note-oldieonnt">[[Software:Windows NT 3.1|Windows NT 3.1]] supports IE 1–2, [[Software:Windows NT 3.5|Windows NT 3.5]] supports IE 1–3, [[Software:Windows NT 3.51|Windows NT 3.51]] and [[Software:Windows NT 4.0|Windows NT 4.0]] supports IE 1–6</ref><ref group="n" name="note-k"/><br />Mac OS [[Software:System 7|7]], [[Software:Mac OS 8|8]]
| colspan="16" | No SSL/TLS support
|-
| colspan="2" style="background:salmon;" | [[Software:Internet Explorer 2|2]]
| {{No|Yes}}
| {{No}}
| {{No}}
| {{No}}
| {{No}}
| {{No}}
| {{No}}
| {{No}}
| {{No}}
| colspan="3" | No SSL 3.0 or TLS support
| {{No|Vulnerable}}
| {{No|Vulnerable}}
| {{No|Vulnerable}}
| {{N/A}}
|-
|-
| colspan="2" style="background:salmon;" | [[Software:Internet Explorer 3|3]]
| {{No|Yes}}
| {{No|Yes}}<ref name="IESSL3TLS1">{{cite web|title=What browsers only support SSLv2?|url=https://stackoverflow.com/q/881563 |accessdate=2014-06-19 |df=}}</ref>
| {{No}}
| {{No}}
| {{No}}
| {{No}}
| {{No}}
| {{No}}
| {{No}}
| {{No|Vulnerable}}
| {{Yes|Not affected}}
| {{No|Vulnerable}}
| {{No|Vulnerable}}
| {{No|Vulnerable}}
| {{No|Vulnerable}}
| {{Unknown}}
|-
| colspan="2" style="background:salmon;" | [[Software:Internet Explorer 4|4]], [[Software:Internet Explorer 5|5]], [[Software:Internet Explorer 6|6]]
| style="background:salmon;" | Windows [[Software:Windows 3.1x|3.1]], [[Software:Windows 95|95]], [[Software:Windows 98|98]], [[Software:Windows NT|NT]], [[Software:Windows 2000|2000]]<ref group="n" name="note-oldieonnt"/><ref group="n" name="note-k"/><br />Mac OS [[Software:System 7|7.1]], [[Software:Mac OS 8|8]], [[Software:Mac OS X|X]],<br />[[Software:Solaris (operating system)|Solaris]], [[Software:HP-UX|HP-UX]]
| {{No|Enabled by default}}
| {{No|Enabled by default}}
| {{Partial|Disabled by default}}<br /><ref name="IESSL3TLS1"/>
| {{No}}
| {{No}}
| {{No}}
| {{No}}
| {{No}}
| {{No}}
| {{No|Vulnerable}}
| {{Yes|Not affected}}
| {{No|Vulnerable}}
| {{No|Vulnerable}}
| {{No|Vulnerable}}
| {{No|Vulnerable}}
| {{Yes|Yes<ref group="n" name="viasetting"/>}}
|-
| colspan="2" style="background:salmon;" | [[Software:Internet Explorer 6|6]]
| rowspan="2" style="background:salmon;" | [[Software:Windows XP|Windows XP]]<ref group="n" name="note-k"/>
| {{No|Enabled by default}}
| {{No|Enabled by default}}
| {{Partial|Disabled by default}}
| {{No}}
| {{No}}
| {{No}}
| {{No}}
| {{Yes}}<br /><ref group="n" name="Win2003SHA2">MS13-095 or MS14-049 for 2003 and XP-64 or SP3 for XP (32-bit)</ref><ref name=WinXP2003SHA2>{{cite web|url=https://blogs.technet.com/b/pki/archive/2010/09/30/sha2-and-windows.aspx|title=SHA2 and Windows – Windows PKI blog – Site Home – TechNet Blogs|date=2010-09-30|accessdate=2014-07-29|url-status=live|archiveurl=https://web.archive.org/web/20140716230537/http://blogs.technet.com/b/pki/archive/2010/09/30/sha2-and-windows.aspx|archivedate=2014-07-16}}</ref>
| {{No}}
| {{Yes|Mitigated}}
| {{Yes|Not affected}}
| {{No|Vulnerable}}
| {{No|Vulnerable}}
| {{No|Vulnerable}}
| {{No|Vulnerable}}
| {{Yes|Yes<ref group="n" name="viasetting"/>}}
|-
| colspan="2" style="background:salmon;" | [[Software:Internet Explorer 7|7]], [[Software:Internet Explorer 8|8]]
| {{Yes|Disabled by default}}<br /><ref name="IE7HTTPS">{{cite web |url=https://msdn.microsoft.com/en-us/library/bb250503.aspx |title=HTTPS Security Improvements in Internet Explorer 7 |accessdate=2013-10-29 |url-status=live |archiveurl=https://web.archive.org/web/20131010205312/http://msdn.microsoft.com/en-us/library/bb250503.aspx |archivedate=2013-10-10}}</ref>
| {{No|Enabled by default}}
| {{Yes}}<ref name="IE7HTTPS"/>
| {{No}}
| {{No}}
| {{No}}
| {{Yes}}
| {{Yes}}<br /><ref group="n" name="Win2003SHA2"/><ref name=WinXP2003SHA2/>
| {{No}}
| {{Yes|Mitigated}}
| {{Yes|Not affected}}
| {{No|Vulnerable}}
| {{No|Vulnerable}}
| {{No|Vulnerable}}
| {{No|Vulnerable}}
| {{Yes|Yes<ref group="n" name="viasetting"/>}}
|-
| colspan="2" style="background:salmon;" | [[Software:Internet Explorer 6|6]]
| rowspan="2" style="background:salmon;" | [[Software:Windows Server 2003|Server 2003]]{{refn |group="n" |name="note-k" |Windows XP as well as Server 2003 and older support only weak ciphers like 3DES and RC4 out of the box.<ref name="TLS Cipher Suites">{{cite web|url=https://msdn.microsoft.com/en-us/library/windows/desktop/aa380512.aspx|title=TLS Cipher Suites|publisher=Microsoft|url-status=live|archiveurl=https://web.archive.org/web/20170313125201/https://msdn.microsoft.com/en-us/library/windows/desktop/aa380512.aspx|archivedate=2017-03-13}}</ref> The weak ciphers of these SChannel version are not only used for IE, but also for other Microsoft products running on this OS, like Office or Windows Update. Only Windows Server 2003 can get a manually update to support AES ciphers by KB948963<ref name="Archived copy">{{cite web |url=https://support.microsoft.com/kb/948963 |title=Archived copy |accessdate=2017-07-19 |url-status=live |archiveurl=https://web.archive.org/web/20150311105145/http://support.microsoft.com/kb/948963 |archivedate=2015-03-11}}</ref>}}
| {{No|Enabled by default}}
| {{No|Enabled by default}}
| {{Partial|Disabled by default}}
| {{No}}
| {{No}}
| {{No}}
| {{No}}
| {{Yes}}<br /><ref group="n" name="Win2003SHA2"/><ref name=WinXP2003SHA2/>
| {{No}}
| {{Yes|Mitigated}}
| {{Yes|Not affected}}
| {{No|Vulnerable}}
| {{No|Vulnerable}}
| {{Yes|Mitigated}}<br /><ref name=MS15-031>{{cite web|url=https://technet.microsoft.com/en-us/security/MS15-031|title=Vulnerability in Schannel Could Allow Security Feature Bypass (3046049)|date=2015-03-10|accessdate=2015-03-11|url-status=live|archiveurl=https://web.archive.org/web/20170313130837/https://technet.microsoft.com/en-us/security/MS15-031|archivedate=2017-03-13}}</ref>
| {{Yes|Mitigated}}<br /><ref name=MS15-055>{{cite web|url=https://technet.microsoft.com/en-us/security/MS15-055|title=Vulnerability in Schannel Could Allow Information Disclosure (3061518)|date=2015-05-12|accessdate=2015-05-22|url-status=live|archiveurl=https://web.archive.org/web/20161008035505/https://technet.microsoft.com/en-us/security/MS15-055|archivedate=2016-10-08}}</ref>
| {{Yes|Yes<ref group="n" name="viasetting"/>}}
|-
| colspan="2" style="background:salmon;" | [[Software:Internet Explorer 7|7]], [[Software:Internet Explorer 8|8]]
| {{Yes|Disabled by default}}<br /><ref name="IE7HTTPS"/>
| {{No|Enabled by default}}
| {{Yes}}<ref name="IE7HTTPS"/>
| {{No}}
| {{No}}
| {{No}}
| {{Yes}}
| {{Yes}}<br /><ref group="n" name="Win2003SHA2"/><ref name=WinXP2003SHA2/>
| {{No}}
| {{Yes|Mitigated}}
| {{Yes|Not affected}}
| {{No|Vulnerable}}
| {{No|Vulnerable}}
| {{Yes|Mitigated}}<br /><ref name=MS15-031/>
| {{Yes|Mitigated}}<br /><ref name=MS15-055/>
| {{Yes|Yes<ref group="n" name="viasetting"/>}}
|-
| colspan="2" style="background:salmon;" | [[Software:Internet Explorer 7|7]], [[Software:Internet Explorer 8|8]], [[Software:Internet Explorer 9|9]]
| style="background:salmon;" | [[Software:Windows Vista|Windows Vista]]
| {{Yes|Disabled by default}}
| {{No|Enabled by default}}
| {{Yes}}
| {{No}}
| {{No}}
| {{No}}
| {{Yes}}
| {{Yes}}
| {{Yes}}<ref name="ECC"/>
| {{Yes|Mitigated}}
| {{Yes|Not affected}}
| {{No|Vulnerable}}
| {{No|Vulnerable}}
| {{Yes|Mitigated}}<br /><ref name=MS15-031/>
| {{Yes|Mitigated}}<br /><ref name=MS15-055/>
| {{Yes|Yes<ref group="n" name="viasetting"/>}}
|-
| style="background:salmon;" | {{nowrap|[[Software:Internet Explorer 7|7]], [[Software:Internet Explorer 8|8]]}}{{refn |group="n" |name="msl-ie-dotnet-an"|Internet Explorer Support Announcement<ref name=msl-ie-dotnet-an>{{cite web|url=https://support.microsoft.com/gp/msl-ie-dotnet-an|title=Microsoft Support Lifecycle|publisher=Microsoft|url-status=live|archiveurl=https://web.archive.org/web/20150310050219/http://support.microsoft.com/gp/msl-ie-dotnet-an|archivedate=2015-03-10}}</ref>}}
| style="background:#FFCC99;" | [[Software:Internet Explorer 9|9]]
| style="background:#FFCC99;" | [[Software:Windows Server 2008|Server 2008]]
| {{Yes|Disabled by default}}
| {{No|Enabled by default}}
| {{Yes}}
| {{Partial|<small>Disabled by default&#8203;<ref name="2008R1TLS1.2"/><br />(KB4019276)</small>}}
| {{Partial|<small>Disabled by default&#8203;<ref name="2008R1TLS1.2"/><br />(KB4019276)</small>}}
| {{No}}
| {{Yes}}
| {{Yes}}
| {{Yes}}<ref name="ECC"/>
| {{Yes|Mitigated}}
| {{Yes|Not affected}}
| {{No|Vulnerable}}
| {{No|Vulnerable}}
| {{Yes|Mitigated}}<br /><ref name=MS15-031/>
| {{Yes|Mitigated}}<br /><ref name=MS15-055/>
| {{Yes|Yes<ref group="n" name="viasetting"/>}}
|-
| colspan="2" rowspan="1" style="background:salmon;" | [[Software:Internet Explorer 8|8]], [[Software:Internet Explorer 9|9]], [[Software:Internet Explorer 10|10]]<ref group="n" name="msl-ie-dotnet-an"/>
| rowspan="2" style="background:#FFCC99;" | [[Software:Windows 7|Windows 7]]<br/>[[Software:Windows Server 2008 R2|Server 2008 R2]]
| rowspan="1" ! {{Yes|Disabled by default}}
| rowspan="1" ! {{No|Enabled by default}}
| rowspan="1" ! {{Yes}}
| rowspan="1" ! {{Partial|Disabled by default}}<br /><ref name="Win7TLS1.1">{{cite web |url=https://blogs.msdn.com/b/ieinternals/archive/2009/06/19/windows-7-support-for-tls-and-ciphers.aspx |title=Windows 7 adds support for TLSv1.1 and TLSv1.2 – IEInternals – Site Home – MSDN Blogs |accessdate=2013-10-29 |url-status=live |archiveurl=https://web.archive.org/web/20131226222853/http://blogs.msdn.com/b/ieinternals/archive/2009/06/19/windows-7-support-for-tls-and-ciphers.aspx |archivedate=2013-12-26}}</ref>
| rowspan="1" ! {{Partial|Disabled by default}}<br /><ref name="Win7TLS1.1"/>
| rowspan="1" ! {{No}}
| rowspan="1" ! {{Yes}}
| rowspan="1" ! {{Yes}}
| rowspan="1" ! {{Yes}}
| rowspan="1" ! {{Yes|Mitigated}}
| rowspan="1" ! {{Yes|Not affected}}
| rowspan="1" ! {{No|Vulnerable}}
| rowspan="1" ! {{Partial|Lowest priority<br /><ref name="20141111msblog">{{cite web | url=https://blogs.microsoft.com/cybertrust/2014/11/11/hundreds-of-millions-of-microsoft-customers-now-benefit-from-best-in-class-encryption/ | title=Hundreds of Millions of Microsoft Customers Now Benefit from Best-in-Class Encryption | publisher=Microsoft Security | date=2014-11-11 | accessdate=2014-11-14 | author=Thomlinson, Matt | url-status=live | archiveurl=https://web.archive.org/web/20141114143813/http://blogs.microsoft.com/cybertrust/2014/11/11/hundreds-of-millions-of-microsoft-customers-now-benefit-from-best-in-class-encryption/ | archivedate=2014-11-14}}</ref>{{refn |group="n" |name="RC4fallbackWin7"|RC4 can be disabled except as a fallback (Only when no cipher suites with other than RC4 is available, cipher suites with RC4 will be used as a fallback.)<ref name=win7-8rc4>[https://support.microsoft.com/kb/2868725/ Microsoft security advisory: Update for disabling RC4] {{webarchive|url=https://web.archive.org/web/20150311053342/http://support.microsoft.com/kb/2868725 |date=2015-03-11}}</ref>}}}}
| rowspan="1" ! {{Yes|Mitigated}}<br /><ref name=MS15-031/>
| rowspan="1" ! {{Yes|Mitigated}}<br /><ref name=MS15-055/>
| rowspan="1" ! {{Yes|Yes<ref group="n" name="viasetting"/>}}
|-
| colspan="2" rowspan="1" style="background:#FFCC99;" | [[Software:Internet Explorer 11|11]]
| rowspan="1" ! {{Yes|Disabled by default}}
| rowspan="1" ! {{Yes|Disabled by default}}<br /><ref group="n" name="ie11_ssl3"/>
| rowspan="1" ! {{Yes}}
| rowspan="1" ! {{Yes}}<ref name="IE11_TLS_1.1_1.2">{{cite web |author=Microsoft |url=https://blogs.msdn.com/b/ieinternals/archive/2013/09/24/internet-explorer-11-changelist-change-log.aspx |title=IE11 Changes |date=2013-09-24 |accessdate=2013-11-01 |url-status=live |archiveurl=https://web.archive.org/web/20131030114356/http://blogs.msdn.com/b/ieinternals/archive/2013/09/24/internet-explorer-11-changelist-change-log.aspx |archivedate=2013-10-30}}</ref>
| rowspan="1" ! {{Yes}}<ref name="IE11_TLS_1.1_1.2"/>
| rowspan="1" ! {{No}}
| rowspan="1" ! {{Yes}}
| rowspan="1" ! {{Yes}}
| rowspan="1" ! {{Yes}}
| rowspan="1" ! {{Yes|Mitigated}}
| rowspan="1" ! {{Yes|Not affected}}
| rowspan="1" ! {{Yes|Mitigated<br />{{refn |group="n" |name="ie11_ssl3" |Fallback to SSL 3.0 is sites blocked by default in Internet Explorer 11 for Protected Mode.<ref>{{cite web|url=https://blogs.msdn.com/b/ie/archive/2015/02/10/february-2015-security-updates-for-internet-explorer.aspx|title=February 2015 security updates for Internet Explorer|date=2015-02-11|accessdate=2015-02-11|url-status=live|archiveurl=https://web.archive.org/web/20150211031724/http://blogs.msdn.com/b/ie/archive/2015/02/10/february-2015-security-updates-for-internet-explorer.aspx|archivedate=2015-02-11}}</ref><ref name="support.microsoft.com">{{cite web|url=https://support.microsoft.com/kb/3038778|title=Update turns on the setting to disable SSL 3.0 fallback for protected mode sites by default in Internet Explorer 11|accessdate=2015-02-11|url-status=live|archiveurl=https://web.archive.org/web/20150214082207/http://support.microsoft.com/kb/3038778|archivedate=2015-02-14}}</ref> SSL 3.0 is disabled by default in Internet Explorer 11 since April 2015.<ref name="technet.microsoft.com">{{cite web|url=https://technet.microsoft.com/en-us/security/3009008|title=Vulnerability in SSL 3.0 Could Allow Information Disclosure|date=2015-04-14|accessdate=2015-04-14|url-status=live|archiveurl=https://web.archive.org/web/20161008035547/https://technet.microsoft.com/en-us/security/3009008|archivedate=2016-10-08}}</ref>}}}}
| rowspan="1" ! {{Yes|Disabled by default}}&#8203;<ref>{{cite web |author=Microsoft Edge Team |url=https://blogs.windows.com/msedgedev/2016/08/09/rc4-now-deprecated/ |title=RC4 is now disabled in Microsoft Edge and Internet Explorer 11 |publisher=Microsoft |date=2016-08-09 |url-status=live |archiveurl= https://web.archive.org/web/20160821091621/https://blogs.windows.com/msedgedev/2016/08/09/rc4-now-deprecated/ |archivedate=2016-08-21}}</ref>
| rowspan="1" ! {{Yes|Mitigated}}<br /><ref name=MS15-031/>
| rowspan="1" ! {{Yes|Mitigated}}<br /><ref name=MS15-055/>
| rowspan="1" ! {{Yes|Yes<ref group="n" name="viasetting"/>}}
|-
| colspan="2" style="background:salmon;" | [[Software:Internet Explorer 10|10]]<ref group="n" name="msl-ie-dotnet-an"/>
| style="background:salmon;" | [[Software:Windows 8|Windows 8]]
| rowspan="2" ! {{Yes|Disabled by default}}
| rowspan="2" ! {{No|Enabled by default}}
| rowspan="2" ! {{Yes}}
| rowspan="2" ! {{Partial|Disabled by default}}<br /><ref name="Win7TLS1.1"/>
| rowspan="2" ! {{Partial|Disabled by default}}<br /><ref name="Win7TLS1.1"/>
| rowspan="2" ! {{No}}
| rowspan="2" ! {{Yes}}
| rowspan="2" ! {{Yes}}
| rowspan="2" ! {{Yes}}
| rowspan="2" ! {{Yes|Mitigated}}
| rowspan="2" ! {{Yes|Not affected}}
| rowspan="2" ! {{No|Vulnerable}}
| rowspan="2" ! {{Partial|Lowest priority<br /><ref name="20141111msblog"/><ref group="n" name="RC4fallbackWin7"/>}}
| rowspan="2" ! {{Yes|Mitigated}}<br /><ref name=MS15-031/>
| rowspan="2" ! {{Yes|Mitigated}}<br /><ref name=MS15-055/>
| rowspan="2" ! {{Yes|Yes<ref group="n" name="viasetting"/>}}
|-
| colspan="2" style="background:#FFCC99;" | [[Software:Internet Explorer 10|10]]
| style="background:khaki;" | [[Software:Windows Server 2012|Server 2012]]
|-
| rowspan="2" colspan="2" style="background:khaki;" | [[Software:Internet Explorer 11|11]]<ref>{{cite web|url=https://support.microsoft.com/en-us/help/4492872/update-for-internet-explorer-april-16-2019|title=Internet Explorer 11 for Windows Server 2012 and Windows Embedded 8 Standard|date=2019-04-16|website=Microsoft Support}}</ref>
| style="background:khaki;" | [[Software:Windows 8.1|Windows 8.1]]
| rowspan="2" ! {{Yes|Disabled by default}}
| rowspan="2" ! {{Yes|Disabled by default}}<br /><ref group="n" name="ie11_ssl3"/>
| rowspan="2" ! {{Yes}}
| rowspan="2" ! {{Yes}}<ref name="IE11_TLS_1.1_1.2"/>
| rowspan="2" ! {{Yes}}<ref name="IE11_TLS_1.1_1.2"/>
| rowspan="2" ! {{No}}
| rowspan="2" ! {{Yes}}
| rowspan="2" ! {{Yes}}
| rowspan="2" ! {{Yes}}
| rowspan="2" ! {{Yes|Mitigated}}
| rowspan="2" ! {{Yes|Not affected}}
| rowspan="2" ! {{Yes|Mitigated<br /><ref group="n" name="ie11_ssl3"/>}}
| rowspan="2" ! {{Yes|Disabled by default&#8203;<ref group="n" name="RC4-disabled"/>}}
| rowspan="2" ! {{Yes|Mitigated}}<br /><ref name=MS15-031/>
| rowspan="2" ! {{Yes|Mitigated}}<br /><ref name=MS15-055/>
| rowspan="2" ! {{Yes|Yes<ref group="n" name="viasetting"/>}}
|-
| style="background:khaki;" | [[Software:Windows Server 2012|Server 2012]] / <br />2012 R2
|-
! Browser
! colspan="2" | Version
! Platforms
! SSL 2.0 (insecure)
! SSL 3.0 (insecure)
! TLS 1.0
! TLS 1.1
! TLS 1.2
! TLS 1.3
! EV certificate
! SHA-2 certificate
! ECDSA certificate
! BEAST
! CRIME
! POODLE (SSLv3)
! RC4
! FREAK
! Logjam
! Protocol selection by user
|-
! rowspan="15" | [[Software:Microsoft Edge|Microsoft Edge]]<ref group="n" name="Edge engine">Edge (formerly known as Project Spartan) is based on a fork of the Internet Explorer 11 rendering engine.</ref><br /><small>Client only</small><br /><br />[[Software:Internet Explorer|Internet Explorer]]<small><br />Client<br />and<br />Server (SAC)<br /><ref group="n" name="note-d"/></small>
| style="background:salmon;" | [[Software:Internet Explorer 11|IE 11]]
| style="background:salmon;" | [[Software:Microsoft Edge|Edge]]<br/>12–13
| style="background:salmon;" | [[Software:Windows 10|Windows 10]]<br/>v1507–v1511
| {{Yes|Disabled by default}}
| {{Yes|Disabled by default}}
| {{Yes}}
| {{Yes}}
| {{Yes}}
| {{No}}
| {{Yes}}
| {{Yes}}
| {{Yes}}
| {{Yes|Mitigated}}
| {{Yes|Not affected}}
| {{Yes|Mitigated}}
| {{Yes|Disabled by default&#8203;<ref group="n" name="RC4-disabled"/>}}
| {{Yes|Mitigated}}
| {{Yes|Mitigated}}
| {{Yes|Yes<ref group="n" name="viasetting"/>}}
|-
| style="background:salmon;" | [[Software:Internet Explorer 11|IE 11]]
| style="background:salmon;" |[[Software:Microsoft Edge|Edge 14]]
| style="background:salmon;" | [[Software:Windows 10|Windows 10 v1607]]
| {{Yes|No}}<ref name="Windows10_v1607schannel" />
| {{Yes|Disabled by default}}
| {{Yes}}
| {{Yes}}
| {{Yes}}
| {{No}}
| {{Yes}}
| {{Yes}}
| {{Yes}}
| {{Yes|Mitigated}}
| {{Yes|Not affected}}
| {{Yes|Mitigated}}
| {{Yes|Disabled by default&#8203;<ref group="n" name="RC4-disabled"/>}}
| {{Yes|Mitigated}}
| {{Yes|Mitigated}}
| {{Yes|Yes<ref group="n" name="viasetting"/>}}
|-
| style="background:salmon;" | [[Software:Internet Explorer 11|IE 11]]
| style="background:salmon;" | [[Software:Microsoft Edge|Edge 15]]
| style="background:salmon;" | [[Software:Windows 10|Windows 10 v1703]]
| {{Yes|No}}
| {{Yes|Disabled by default}}
| {{Yes}}
| {{Yes}}
| {{Yes}}
| {{No}}
| {{Yes}}
| {{Yes}}
| {{Yes}}
| {{Yes|Mitigated}}
| {{Yes|Not affected}}
| {{Yes|Mitigated}}
| {{Yes|Disabled by default&#8203;<ref group="n" name="RC4-disabled"/>}}
| {{Yes|Mitigated}}
| {{Yes|Mitigated}}
| {{Yes|Yes<ref group="n" name="viasetting"/>}}
|-
| style="background:salmon;" | [[Software:Internet Explorer 11|IE 11]]
| style="background:salmon;" | [[Software:Microsoft Edge|Edge 16]]
| style="background:salmon;" | [[Software:Windows 10|Windows 10 v1709]]
| {{Yes|No}}
| {{Yes|Disabled by default}}
| {{Yes}}
| {{Yes}}
| {{Yes}}
| {{No}}
| {{Yes}}
| {{Yes}}
| {{Yes}}
| {{Yes|Mitigated}}
| {{Yes|Not affected}}
| {{Yes|Mitigated}}
| {{Yes|Disabled by default&#8203;<ref group="n" name="RC4-disabled"/>}}
| {{Yes|Mitigated}}
| {{Yes|Mitigated}}
| {{Yes|Yes<ref group="n" name="viasetting"/>}}
|-
| colspan="2" style="background:salmon;" | [[Software:Internet Explorer 11|IE 11]]
| style="background:salmon;" | [[Software:Windows Server 2016|Server v1709 (SAC)]]
| {{Yes|No}}
| {{Yes|Disabled by default}}
| {{Yes}}
| {{Yes}}
| {{Yes}}
| {{No}}
| {{Yes}}
| {{Yes}}
| {{Yes}}
| {{Yes|Mitigated}}
| {{Yes|Not affected}}
| {{Yes|Mitigated}}
| {{Yes|Disabled by default&#8203;<ref group="n" name="RC4-disabled"/>}}
| {{Yes|Mitigated}}
| {{Yes|Mitigated}}
| {{Yes|Yes<ref group="n" name="viasetting"/>}}
|-
| style="background:#FFCC99;" | [[Software:Internet Explorer 11|IE 11]]
| style="background:#FFCC99;" | [[Software:Microsoft Edge|Edge 17]]
| style="background:#FFCC99;" | [[Software:Windows 10|Windows 10 v1803]]
| {{Yes|No}}
| {{Yes|Disabled by default}}
| {{Yes}}
| {{Yes}}
| {{Yes}}
| {{No}}
| {{Yes}}
| {{Yes}}
| {{Yes}}
| {{Yes|Mitigated}}
| {{Yes|Not affected}}
| {{Yes|Mitigated}}
| {{Yes|Disabled by default&#8203;<ref group="n" name="RC4-disabled"/>}}
| {{Yes|Mitigated}}
| {{Yes|Mitigated}}
| {{Yes|Yes<ref group="n" name="viasetting"/>}}
|-
| colspan="2" style="background:#FFCC99;" | [[Software:Internet Explorer 11|IE 11]]
| style="background:#FFCC99;" | [[Software:Windows Server 2016|Server v1803 (SAC)]]
| {{Yes|No}}
| {{Yes|Disabled by default}}
| {{Yes}}
| {{Yes}}
| {{Yes}}
| {{No}}
| {{Yes}}
| {{Yes}}
| {{Yes}}
| {{Yes|Mitigated}}
| {{Yes|Not affected}}
| {{Yes|Mitigated}}
| {{Yes|Disabled by default&#8203;<ref group="n" name="RC4-disabled"/>}}
| {{Yes|Mitigated}}
| {{Yes|Mitigated}}
| {{Yes|Yes<ref group="n" name="viasetting"/>}}
|-
| style="background:#FFCC99;" | [[Software:Internet Explorer 11|IE 11]]
| style="background:#FFCC99;" |[[Software:Microsoft Edge|Edge 18]]
| style="background:#FFCC99;" |[[Software:Windows 10|Windows 10 v1809]]
| {{Yes|No}}
| {{Yes|Disabled by default}}
| {{Yes}}
| {{Yes}}
| {{Yes}}
| {{No}}
| {{Yes}}
| {{Yes}}
| {{Yes}}
| {{Yes|Mitigated}}
| {{Yes|Not affected}}
| {{Yes|Mitigated}}
| {{Yes|Disabled by default&#8203;<ref group="n" name="RC4-disabled"/>}}
| {{Yes|Mitigated}}
| {{Yes|Mitigated}}
| {{Yes|Yes<ref group="n" name="viasetting"/>}}
|-
| colspan="2" style="background:#FFCC99;" | [[Software:Internet Explorer 11|IE 11]]
| style="background:#FFCC99;" | [[Software:Windows Server 2019|Server v1809 (SAC)]]
| {{Yes|No}}
| {{Yes|Disabled by default}}
| {{Yes}}
| {{Yes}}
| {{Yes}}
| {{No}}
| {{Yes}}
| {{Yes}}
| {{Yes}}
| {{Yes|Mitigated}}
| {{Yes|Not affected}}
| {{Yes|Mitigated}}
| {{Yes|Disabled by default&#8203;<ref group="n" name="RC4-disabled"/>}}
| {{Yes|Mitigated}}
| {{Yes|Mitigated}}
| {{Yes|Yes<ref group="n" name="viasetting"/>}}
|-
| style="background:khaki;" | [[Software:Internet Explorer 11|IE 11]]
| style="background:#a0e75a;" |[[Software:Microsoft Edge|Edge 18]]
| style="background:#a0e75a;" |[[Software:Windows 10|Windows 10 v1903]]
| {{Yes|No}}
| {{Yes|Disabled by default}}
| {{Yes}}
| {{Yes}}
| {{Yes}}
| {{table-experimental|Disabled by default (experimental)}}
| {{Yes}}
| {{Yes}}
| {{Yes}}
| {{Yes|Mitigated}}
| {{Yes|Not affected}}
| {{Yes|Mitigated}}
| {{Yes|Disabled by default&#8203;<ref group="n" name="RC4-disabled"/>}}
| {{Yes|Mitigated}}
| {{Yes|Mitigated}}
| {{Yes|Yes<ref group="n" name="viasetting"/>}}
|-
| colspan="2" style="background:khaki;" | [[Software:Internet Explorer 11|IE 11]]
| style="background:#a0e75a;" | [[Software:Windows Server 2019|Server v1903 (SAC)]]
| {{Yes|No}}
| {{Yes|Disabled by default}}
| {{Yes}}
| {{Yes}}
| {{Yes}}
| {{table-experimental|Disabled by default (experimental)}}
| {{Yes}}
| {{Yes}}
| {{Yes}}
| {{Yes|Mitigated}}
| {{Yes|Not affected}}
| {{Yes|Mitigated}}
| {{Yes|Disabled by default&#8203;<ref group="n" name="RC4-disabled"/>}}
| {{Yes|Mitigated}}
| {{Yes|Mitigated}}
| {{Yes|Yes<ref group="n" name="viasetting"/>}}
|-
| style="background:khaki;" | [[Software:Internet Explorer 11|IE 11]]
| {{table-experimental|[[Software:Microsoft Edge|Edge 18]]}}
| {{table-experimental|[[Software:Windows 10|Windows 10 v19H2]]}}
| {{Yes|No}}
| {{Yes|Disabled by default}}
| {{Yes}}
| {{Yes}}
| {{Yes}}
| {{Unknown}}
| {{Yes}}
| {{Yes}}
| {{Yes}}
| {{Yes|Mitigated}}
| {{Yes|Not affected}}
| {{Yes|Mitigated}}
| {{Yes|Disabled by default&#8203;<ref group="n" name="RC4-disabled"/>}}
| {{Yes|Mitigated}}
| {{Yes|Mitigated}}
| {{Yes|Yes<ref group="n" name="viasetting"/>}}
|-
| colspan="2" style="background:khaki;" | [[Software:Internet Explorer 11|IE 11]]
| {{table-experimental|[[Software:Windows Server 2019|Server v19H2 (SAC)]]}}
| {{Yes|No}}
| {{Yes|Disabled by default}}
| {{Yes}}
| {{Yes}}
| {{Yes}}
| {{Unknown}}
| {{Yes}}
| {{Yes}}
| {{Yes}}
| {{Yes|Mitigated}}
| {{Yes|Not affected}}
| {{Yes|Mitigated}}
| {{Yes|Disabled by default&#8203;<ref group="n" name="RC4-disabled"/>}}
| {{Yes|Mitigated}}
| {{Yes|Mitigated}}
| {{Yes|Yes<ref group="n" name="viasetting"/>}}
|-
|-
| style="background:khaki;" | [[Software:Internet Explorer 11|IE 11]]
| {{table-experimental |[[Software:Microsoft Edge|Edge]]}}
| {{table-experimental|[[Software:Windows 10|Windows 10 v20H1]]}}
| {{Yes|No}}
| {{Yes|Disabled by default}}
| {{Yes}}
| {{Yes}}
| {{Yes}}
| {{Unknown}}
| {{Yes}}
| {{Yes}}
| {{Yes}}
| {{Yes|Mitigated}}
| {{Yes|Not affected}}
| {{Yes|Mitigated}}
| {{Yes|Disabled by default&#8203;<ref group="n" name="RC4-disabled"/>}}
| {{Yes|Mitigated}}
| {{Yes|Mitigated}}
| {{Yes|Yes<ref group="n" name="viasetting"/>}}
|-
| colspan="2" style="background:khaki;" | [[Software:Internet Explorer 11|IE 11]]
| {{table-experimental|[[Software:Windows Server 2019|Server v20H1 (SAC)]]}}
| {{Yes|No}}
| {{Yes|Disabled by default}}
| {{Yes}}
| {{Yes}}
| {{Yes}}
| {{Unknown}}
| {{Yes}}
| {{Yes}}
| {{Yes}}
| {{Yes|Mitigated}}
| {{Yes|Not affected}}
| {{Yes|Mitigated}}
| {{Yes|Disabled by default&#8203;<ref group="n" name="RC4-disabled"/>}}
| {{Yes|Mitigated}}
| {{Yes|Mitigated}}
| {{Yes|Yes<ref group="n" name="viasetting"/>}}
|-
! rowspan="5" | [[Software:Internet Explorer|Microsoft Internet Explorer]]<br /><small>Client<br />(LTSB/C)<br />and<br />Server<br />(LTSB/C)</small><br /><ref group="n" name="note-d"/>
| colspan="2" style="background:khaki;" | [[Software:Internet Explorer 11|IE 11]]
| style="background:khaki;" | [[Software:Windows 10|Windows 10 LTSB 2015 (v1507)]]{{refn |group="n" |name="LTSB"|Except Windows 10 LTSB 2015 (LongTermSupportBranch)<ref name=LTSB>{{cite web|url=http://www.zdnet.com/article/some-windows-10-enterprise-users-wont-get-microsofts-edge-browser|title=Some Windows 10 Enterprise users won't get Microsoft's Edge browser|first=Mary Jo|last=Foley|work=ZDNet|url-status=live|archiveurl=https://web.archive.org/web/20170320184521/http://www.zdnet.com/article/some-windows-10-enterprise-users-wont-get-microsofts-edge-browser/|archivedate=2017-03-20}}</ref>}}
| {{Yes|Disabled by default}}
| {{Yes|Disabled by default}}
| {{Yes}}
| {{Yes}}
| {{Yes}}
| {{No}}
| {{Yes}}
| {{Yes}}
| {{Yes}}
| {{Yes|Mitigated}}
| {{Yes|Not affected}}
| {{Yes|Mitigated}}
| {{Yes|Disabled by default&#8203;<ref group="n" name="RC4-disabled"/>}}
| {{Yes|Mitigated}}
| {{Yes|Mitigated}}
| {{Yes|Yes<ref group="n" name="viasetting"/>}}
|-
| colspan="2" style="background:khaki;" | [[Software:Internet Explorer 11|IE 11]]
| style="background:khaki;" | [[Software:Windows 10|Windows 10 LTSB 2016 (v1607)]]
| {{Yes|No}}<ref name="Windows10_v1607schannel" />
| {{Yes|Disabled by default}}
| {{Yes}}
| {{Yes}}
| {{Yes}}
| {{No}}
| {{Yes}}
| {{Yes}}
| {{Yes}}
| {{Yes|Mitigated}}
| {{Yes|Not affected}}
| {{Yes|Mitigated}}
| {{Yes|Disabled by default&#8203;<ref group="n" name="RC4-disabled"/>}}
| {{Yes|Mitigated}}
| {{Yes|Mitigated}}
| {{Yes|Yes<ref group="n" name="viasetting"/>}}
|-
| colspan="2" style="background:khaki;" | [[Software:Internet Explorer 11|IE 11]]
| style="background:khaki;" |[[Software:Windows Server 2016|Server 2016<br />v1607 (LTSB)]]
| {{Yes|No}}<ref name="Windows10_v1607schannel" />
| {{Yes|Disabled by default}}
| {{Yes}}
| {{Yes}}
| {{Yes}}
| {{No}}
| {{Yes}}
| {{Yes}}
| {{Yes}}
| {{Yes|Mitigated}}
| {{Yes|Not affected}}
| {{Yes|Mitigated}}
| {{Yes|Disabled by default&#8203;<ref group="n" name="RC4-disabled"/>}}
| {{Yes|Mitigated}}
| {{Yes|Mitigated}}
| {{Yes|Yes<ref group="n" name="viasetting"/>}}
|-
| colspan="2" style="background:khaki;" | [[Software:Internet Explorer 11|IE 11]]
| style="background:khaki;" | [[Software:Windows 10|Windows 10 LTSC 2019 (v1809)]]
| {{Yes|No}}
| {{Yes|Disabled by default}}
| {{Yes}}
| {{Yes}}
| {{Yes}}
| {{No}}
| {{Yes}}
| {{Yes}}
| {{Yes}}
| {{Yes|Mitigated}}
| {{Yes|Not affected}}
| {{Yes|Mitigated}}
| {{Yes|Disabled by default&#8203;<ref group="n" name="RC4-disabled"/>}}
| {{Yes|Mitigated}}
| {{Yes|Mitigated}}
| {{Yes|Yes<ref group="n" name="viasetting"/>}}
|-
| colspan="2" style="background:khaki;" | [[Software:Internet Explorer 11|IE 11]]
| style="background:khaki;" | [[Software:Windows Server 2019|Server 2019<br />v1809 (LTSC)]]
| {{Yes|No}}
| {{Yes|Disabled by default}}
| {{Yes}}
| {{Yes}}
| {{Yes}}
| {{No}}
| {{Yes}}
| {{Yes}}
| {{Yes}}
| {{Yes|Mitigated}}
| {{Yes|Not affected}}
| {{Yes|Mitigated}}
| {{Yes|Disabled by default&#8203;<ref group="n" name="RC4-disabled"/>}}
| {{Yes|Mitigated}}
| {{Yes|Mitigated}}
| {{Yes|Yes<ref group="n" name="viasetting"/>}}
|-
! Browser
! colspan="2" | Version
! Platforms
! SSL 2.0 (insecure)
! SSL 3.0 (insecure)
! TLS 1.0
! TLS 1.1
! TLS 1.2
! TLS 1.3
! EV certificate
! SHA-2 certificate
! ECDSA certificate
! BEAST
! CRIME
! POODLE (SSLv3)
! RC4
! FREAK
! Logjam
! Protocol selection by user
|-
! rowspan="3" | [[Software:Internet Explorer Mobile|Microsoft Internet Explorer Mobile]]<br /><ref group="n" name="note-d"/>
| colspan="2" style="background:salmon;" | [[Software:Internet Explorer Mobile|7, 9]]
| style="background:salmon;" | [[Software:Windows Phone 7|Windows Phone 7, 7.5, 7.8]]
| {{Yes|Disabled by default}}<br /><ref name="IE7HTTPS"/>
| {{No|Enabled by default}}
| {{Yes}}
| {{No|style=padding-left:1px; padding-right:1px;}}<br /><small> </small>
| {{No|style=padding-left:1px; padding-right:1px;}}<br /><small> </small>
| {{No}}
| {{No|style=padding-left:1px; padding-right:1px;}}<br /><small> </small>
| {{Yes}}
| {{Yes}}<ref name="ECC2"/>
| {{unknown}}
| {{Yes|Not affected}}
| {{No|Vulnerable}}
| {{No|Vulnerable}}
| {{No|Vulnerable}}
| {{No|Vulnerable}}
| {{Partial|Only with 3rd party tools{{refn|group="n"|name="viaregistry"|Could be disabled via registry editing but need 3rd Party tools to do this.<ref name="XDA">{{cite web |url= http://forum.xda-developers.com/windows-phone-8/development/poodle-ssl-vulnerability-secure-windows-t2906203 |title=POODLE SSL vulnerability – secure your Windo… – Windows Phone 8 Development and Hacking |work=XDA Developers |url-status=live |archiveurl= https://web.archive.org/web/20160923053812/http://forum.xda-developers.com/windows-phone-8/development/poodle-ssl-vulnerability-secure-windows-t2906203 |archivedate=2016-09-23}}</ref>}}}}
|-
| colspan="2" style="background:salmon;" | [[Software:Internet Explorer Mobile|10]]
| style="background:salmon;" | [[Software:Windows Phone 8|Windows Phone 8]]
| {{Yes|Disabled by default}}
| {{No|Enabled by default}}
| {{Yes}}
| {{Partial|Disabled by default}}<br /><ref name="IEMobile10">{{cite web|url=https://social.msdn.microsoft.com/Forums/windowsapps/en-US/2ddee177-5086-4453-987b-d02b6a7ec62d/what-tls-version-is-used-in-windows-phone-8-for-secure-http-connections?forum=wpdevelop|title=What TLS version is used in Windows Phone 8 for secure HTTP connections?|publisher=Microsoft|accessdate=2014-11-07|url-status=live|archiveurl=https://web.archive.org/web/20160304063257/https://social.msdn.microsoft.com/Forums/windowsapps/en-US/2ddee177-5086-4453-987b-d02b6a7ec62d/what-tls-version-is-used-in-windows-phone-8-for-secure-http-connections?forum=wpdevelop|archivedate=2016-03-04}}</ref>
| {{Partial|Disabled by default}}<br /><ref name="IEMobile10"/>
| {{No}}
| {{No|style=padding-left:1px; padding-right:1px;}}<br /><small> </small>
| {{Yes}}
| {{Yes}}<ref name="ssllabs.com">{{cite web|url=https://www.ssllabs.com/ssltest/viewClient.html?name=IE%20Mobile&version=10&platform=Win%20Phone%208.0|title=Qualys SSL Labs – Projects / User Agent Capabilities: Unknown|url-status=live|archiveurl=https://web.archive.org/web/20170301141459/https://www.ssllabs.com/ssltest/viewClient.html?name=IE%20Mobile&version=10&platform=Win%20Phone%208.0|archivedate=2017-03-01}}</ref>
| {{Yes|Mitigated}}
| {{Yes|Not affected}}
| {{No|Vulnerable}}
| {{No|Vulnerable}}
| {{No|Vulnerable}}
| {{No|Vulnerable}}
| {{Partial|Only with 3rd party tools<ref group="n" name="viaregistry"/>}}
|-
| colspan="2" style="background:salmon;"| [[Software:Internet Explorer Mobile|11]]
| style="background:salmon;" | [[Software:Windows Phone 8.1|Windows Phone 8.1]]
| {{Yes|Disabled by default}}
| {{No|Enabled by default}}
| {{Yes}}
| {{Yes}}<ref name="IEMobile11">{{cite web |url=https://technet.microsoft.com/en-us/library/dn756283.aspx |title=Platform Security |publisher=Microsoft |date=2014-06-25 |accessdate=2014-11-07 |url-status=live |archiveurl= https://web.archive.org/web/20170313125118/https://technet.microsoft.com/en-us/library/dn756283.aspx |archivedate=2017-03-13}}</ref>
| {{Yes}}<ref name="IEMobile11"/>
| {{No}}
| {{No|style=padding-left:1px; padding-right:1px;}}<br /><small> </small>
| {{Yes}}
| {{Yes}}
| {{Yes|Mitigated}}
| {{Yes|Not affected}}
| {{No|Vulnerable}}
| {{Partial|Only as fallback<br /><ref group="n" name="RC4fallback"/><ref name="Win8.1RC4">{{cite web |url=https://technet.microsoft.com/en-us/library/dn303404.aspx |title=Release Notes: Important Issues in Windows 8.1 Preview |publisher=Microsoft |date=2013-06-24 |accessdate=2014-11-04 |url-status=live |archiveurl= https://web.archive.org/web/20141104071622/http://technet.microsoft.com/en-us/library/dn303404.aspx |archivedate=2014-11-04}}</ref><ref name="Win8.1RC4Qualys">{{cite web |url=https://community.qualys.com/thread/12092 |title=W8.1(IE11) vs RC4 |work=Qualys Community |accessdate=2014-11-04 |url-status=live |archiveurl= https://web.archive.org/web/20141104093736/https://community.qualys.com/thread/12092 |archivedate=2014-11-04}}</ref>}}
| {{No|Vulnerable}}
| {{No|Vulnerable}}
| {{Partial|Only with 3rd party tools<ref group="n" name="viaregistry"/>}}
|-
! rowspan="4" | [[Software:Microsoft Edge|Microsoft Edge]]<br /><ref group="n" name="Edge engine"/>
| colspan="2" style="background:salmon;" | [[Software:Microsoft Edge|Edge 13]]
| style="background:salmon;" | [[Software:Windows 10 Mobile|Windows 10 Mobile v1511]]
| {{Yes|Disabled by default}}
| {{Yes|Disabled by default}}
| {{Yes}}
| {{Yes}}
| {{Yes}}
| {{No}}
| {{Yes}}
| {{Yes}}
| {{Yes}}
| {{Yes|Mitigated}}
| {{Yes|Not affected}}
| {{Yes|Mitigated}}
| {{Yes|Disabled by default&#8203;<ref group="n" name="RC4-disabled"/>}}
| {{Yes|Mitigated}}
| {{Yes|Mitigated}}
| {{No}}
|-
| colspan="2" style="background:salmon;" | [[Software:Microsoft Edge|Edge 14]]
| style="background:salmon;" | [[Software:Windows 10 Mobile|Windows 10 Mobile v1607]]
| {{Yes|No}}<ref name="Windows10_v1607schannel" />
| {{Yes|Disabled by default}}
| {{Yes}}
| {{Yes}}
| {{Yes}}
| {{No}}
| {{Yes}}
| {{Yes}}
| {{Yes}}
| {{Yes|Mitigated}}
| {{Yes|Not affected}}
| {{Yes|Mitigated}}
| {{Yes|Disabled by default&#8203;<ref group="n" name="RC4-disabled"/>}}
| {{Yes|Mitigated}}
| {{Yes|Mitigated}}
| {{No}}
|-
| rowspan="2" colspan="2" style="background:#FFCC99;" | [[Software:Microsoft Edge|Edge 15]]
| style="background:salmon;" | [[Software:Windows 10 Mobile|Windows 10 Mobile v1703]]
| {{Yes|No}}
| {{Yes|Disabled by default}}
| {{Yes}}
| {{Yes}}
| {{Yes}}
| {{No}}
| {{Yes}}
| {{Yes}}
| {{Yes}}
| {{Yes|Mitigated}}
| {{Yes|Not affected}}
| {{Yes|Mitigated}}
| {{Yes|Disabled by default&#8203;<ref group="n" name="RC4-disabled"/>}}
| {{Yes|Mitigated}}
| {{Yes|Mitigated}}
| {{No}}
|-
| style="background:#FFCC99;" | [[Software:Windows 10 Mobile|Windows 10 Mobile v1709]]
| {{Yes|No}}
| {{Yes|Disabled by default}}
| {{Yes}}
| {{Yes}}
| {{Yes}}
| {{No}}
| {{Yes}}
| {{Yes}}
| {{Yes}}
| {{Yes|Mitigated}}
| {{Yes|Not affected}}
| {{Yes|Mitigated}}
| {{Yes|Disabled by default&#8203;<ref group="n" name="RC4-disabled"/>}}
| {{Yes|Mitigated}}
| {{Yes|Mitigated}}
| {{No}}
|-
! Browser
! colspan="2" | Version
! Platforms
! SSL 2.0 (insecure)
! SSL 3.0 (insecure)
! TLS 1.0
! TLS 1.1
! TLS 1.2
! TLS 1.3
! EV certificate
! SHA-2 certificate
! ECDSA certificate
! BEAST
! CRIME
! POODLE (SSLv3)
! RC4
! FREAK
! Logjam
! Protocol selection by user
|-
! rowspan="12" | [[Software:Opera (web browser)|Opera Browser]]<br /><small>([[Software:Opera Mobile|Opera Mobile]])</small><br /><small>(Pre-Presto and Presto)</small><br />{{refn |group="n" |name="note-e" |[[Software:Opera (web browser)|Opera]] 10 added support for TLS 1.2 as of Presto 2.2. Previous support was for TLS 1.0 and 1.1. TLS 1.1 and 1.2 are disabled by default (except for version 9<ref name="Opera 9.0 for Windows Changelog">{{cite web|url=http://www.opera.com/docs/changelogs/windows/900/|title=Opera 9.0 for Windows Changelog|url-status=live|archiveurl=https://archive.today/20120910/http://www.opera.com/docs/changelogs/windows/900/|archivedate=2012-09-10}}</ref> that enabled TLS 1.1 by default).}}
| colspan="2" style="background:salmon;" | 1–2
| rowspan="12" | <s>[[Software:Microsoft Windows|Windows]]</s><br /><s>[[Software:MacOS|MacOS]]</s><br /><s>[[Software:Linux|Linux]]</s><br /><s>Android</s><br /><s>[[Software:S60 (software platform)|Symbian S60]]</s><br /><s>[[Software:Maemo|Maemo]]</s><br /><s>[[Software:Windows Mobile|Windows Mobile]]</s>
| colspan="16" | No SSL/TLS support<ref name="Opera2">{{cite web|url=http://www.opera.com/docs/history/presto/#o2|title=Opera 2 series|accessdate=2014-09-20|url-status=live|archiveurl=https://web.archive.org/web/20141023073434/http://www.opera.com/docs/history/presto/#o2|archivedate=2014-10-23}}</ref>
|-
| colspan="2" style="background:salmon;" | 3
| {{No|Yes}}<ref name="Opera3">{{cite web|url=http://www.opera.com/docs/history/presto/#o3|title=Opera 3 series|accessdate=2014-09-20|url-status=live|archiveurl=https://web.archive.org/web/20141023073434/http://www.opera.com/docs/history/presto/#o3|archivedate=2014-10-23}}</ref>
| No
| {{No}}
| {{No}}
| {{No}}
| {{No}}
| {{No}}
| {{No}}
| {{No}}
| colspan="3" | No SSL 3.0 or TLS support
| {{No|Vulnerable}}
| {{Unknown}}
| {{Unknown}}
| {{N/A}}
|-
| colspan="2" style="background:salmon;" | 4
| {{No|Yes}}
| {{No|Yes}}<ref name="Opera4">{{cite web|url=http://www.opera.com/docs/history/presto/#o4|title=Opera 4 series|accessdate=2014-09-20|url-status=live|archiveurl=https://web.archive.org/web/20141023073434/http://www.opera.com/docs/history/presto/#o4|archivedate=2014-10-23}}</ref>
| {{No}}
| {{No}}
| {{No}}
| {{No}}
| {{No}}
| {{No}}
| {{No}}
| {{No|Vulnerable}}
| {{Yes|Not affected}}
| {{No|Vulnerable}}
| {{No|Vulnerable}}
| {{Unknown}}
| {{Unknown}}
| {{Unknown}}
|-
| colspan="2" style="background:salmon;" | 5
| {{No|Enabled by default}}
| {{No|Enabled by default}}
| {{Yes}}<ref name="Opera5">{{cite web|url=http://www.opera.com/docs/changelogs/windows/500-512/|title=Changelog for Opera 5.x for Windows|accessdate=2014-06-19|url-status=live|archiveurl=https://web.archive.org/web/20141019005943/http://www.opera.com/docs/changelogs/windows/500-512/|archivedate=2014-10-19}}</ref>
| {{No}}
| {{No}}
| {{No}}
| {{No}}
| {{No}}
| {{No}}
| {{No|Vulnerable}}
| {{Yes|Not affected}}
| {{No|Vulnerable}}
| {{No|Vulnerable}}
| {{Unknown}}
| {{Unknown}}
| {{Yes|Yes<ref group="n" name="viasetting"/>}}
|-
| colspan="2" style="background:salmon;" | 6–7
| {{No|Enabled by default}}
| {{No|Enabled by default}}
| {{Yes}}<ref name="Opera5"/>
| {{No}}
| {{No}}
| {{No}}
| {{No}}
| {{Yes}}<ref name="SHA-2"/>
| {{No}}
| {{No|Vulnerable}}
| {{Yes|Not affected}}
| {{No|Vulnerable}}
| {{No|Vulnerable}}
| {{Unknown}}
| {{Unknown}}
| {{Yes|Yes<ref group="n" name="viasetting"/>}}
|-
| colspan="2" style="background:salmon;" | 8
| {{No|Enabled by default}}
| {{No|Enabled by default}}
| {{Yes}}
| {{Partial|Disabled by default}}<br /><ref name="opera.com">{{cite web|url=http://www.opera.com/docs/changelogs/windows/800b2/|title=Changelog for Opera [8] Beta 2 for Windows|accessdate=2014-06-19|url-status=live|archiveurl=https://web.archive.org/web/20051123055608/http://opera.com/docs/changelogs/windows/800b2/|archivedate=2005-11-23}}</ref>
| {{No}}
| {{No}}
| {{No}}
| {{Yes}}
| {{No}}
| {{No|Vulnerable}}
| {{Yes|Not affected}}
| {{No|Vulnerable}}
| {{No|Vulnerable}}
| {{Unknown}}
| {{Unknown}}
| {{Yes|Yes<ref group="n" name="viasetting"/>}}
|-
| colspan="2" style="background:salmon;" | 9
| {{Yes|Disabled by default}}<br /><ref>{{cite web |url=http://www.opera.com/docs/specs/opera9/ |title=Web Specifications Supported in Opera 9 |accessdate=2014-06-19 |url-status=live |archiveurl= https://web.archive.org/web/20141026185804/http://www.opera.com/docs/specs/opera9/ |archivedate=2014-10-26}}</ref>
| {{No|Enabled by default}}
| {{Yes}}
| {{Yes}}
| {{No}}
| {{No}}
| {{Partial|since v9.5<br /><small>(only desktop)</small>}}
| {{Yes}}
| {{No}}
| {{No|Vulnerable}}
| {{Yes|Not affected}}
| {{No|Vulnerable}}
| {{No|Vulnerable}}
| {{Unknown}}
| {{Unknown}}
| {{Yes|Yes<ref group="n" name="viasetting"/>}}
|-
| colspan="2" style="background:salmon;" | 10–11.52
| {{Yes|No}}<ref name="Opera10b">{{cite web |url=http://www.opera.com/docs/changelogs/windows/1000b1/ |title=Opera: Opera 10 beta for Windows changelog |accessdate=2014-06-19 |url-status=dead |archiveurl= https://web.archive.org/web/20141023083043/http://www.opera.com/docs/changelogs/windows/1000b1/ |archivedate=2014-10-23}}</ref>
| {{No|Enabled by default}}
| {{Yes}}
| {{Partial|Disabled by default}}
| {{Partial|Disabled by default}}<br /><ref name="Opera10b"/>
| {{No}}
| {{Yes}}<br /><small>(only desktop)</small>
| {{Yes}}
| {{No}}
| {{No|Vulnerable}}
| {{Yes|Not affected}}
| {{No|Vulnerable}}
| {{No|Vulnerable}}
| {{Unknown}}
| {{Unknown}}
| {{Yes|Yes<ref group="n" name="viasetting"/>}}
|-
| colspan="2" style="background:salmon;" | 11.60–11.64
| {{Yes|No}}
| {{No|Enabled by default}}
| {{Yes}}
| {{Partial|Disabled by default}}
| {{Partial|Disabled by default}}
| {{No}}
| {{Yes}}<br /><small>(only desktop)</small>
| {{Yes}}
| {{No}}
| {{Yes|Mitigated<br /><ref name="my.opera.com">{{cite web|title=About Opera 11.60 and new problems with some secure servers|url=http://my.opera.com/securitygroup/blog/2011/12/11/opera-11-60-and-new-problems-with-some-secure-servers|date=2011-12-11|archive-url=https://web.archive.org/web/20120118122036/http://my.opera.com/securitygroup/blog/2011/12/11/opera-11-60-and-new-problems-with-some-secure-servers|archivedate=2012-01-18}}</ref>}}
| {{Yes|Not affected}}
| {{No|Vulnerable}}
| {{No|Vulnerable}}
| {{Unknown}}
| {{Unknown}}
| {{Yes|Yes<ref group="n" name="viasetting"/>}}
|-
| colspan="2" style="background:salmon;" | 12–12.14
| {{Yes|No}}
| {{Yes|Disabled by default<br /><ref group="n" name="note-Opera12-POODLE"/>}}
| {{Yes}}
| {{Partial|Disabled by default}}
| {{Partial|Disabled by default}}
| {{No}}
| {{Yes}}<br /><small>(only desktop)</small>
| {{Yes}}
| {{No}}
| {{Yes|Mitigated}}
| {{Yes|Not affected}}
| {{Yes|Mitigated<br />{{refn |group="n" |name="note-Opera12-POODLE"|SSL 3.0 is disabled by default remotely since October 15, 2014<ref name="OperaPOODLE">{{cite web|url=http://blogs.opera.com/security/2014/10/security-changes-opera-25-poodle-attacks/|title=Security changes in Opera 25; the poodle attacks|date=2014-10-15|accessdate=2014-10-28|url-status=live|archiveurl=https://web.archive.org/web/20141020091840/http://blogs.opera.com/security/2014/10/security-changes-opera-25-poodle-attacks/|archivedate=2014-10-20}}</ref>}}}}
| {{No|Vulnerable}}
| {{Unknown}}
| {{Yes|Mitigated&#8203;<ref name="OperaLogjam">{{cite web|url=http://blogs.opera.com/security/2015/06/unjam-the-logjam/|title=Unjam the logjam|date=2015-06-09|accessdate=2015-06-11|url-status=live|archiveurl=https://web.archive.org/web/20150614005330/http://blogs.opera.com/security/2015/06/unjam-the-logjam/|archivedate=2015-06-14}}</ref>}}
| {{Yes|Yes<ref group="n" name="viasetting"/>}}
|-
| colspan="2" style="background:salmon;" | 12.15–12.17
| {{Yes|No}}
| {{Yes|Disabled by default}}
| {{Yes}}
| {{Partial|Disabled by default}}
| {{Partial|Disabled by default}}
| {{No}}
| {{Yes}}<br /><small>(only desktop)</small>
| {{Yes}}
| {{No}}
| {{Yes|Mitigated}}
| {{Yes|Not affected}}
| {{Yes|Mitigated}}
| {{Partial|Partly mitigated<br /><ref name="ReferenceA">{{cite web|url=http://www.opera.com/ja/security/advisory/1046|title=Advisory: RC4 encryption protocol is vulnerable to certain brute force attacks|date=2013-04-04|accessdate=2014-11-14|url-status=live|archiveurl=https://web.archive.org/web/20150315052403/http://www.opera.com/ja/security/advisory/1046|archivedate=2015-03-15}}</ref><ref name="On the Precariousness of RC4">{{cite web|url=http://my.opera.com/securitygroup/blog/2013/03/20/on-the-precariousness-of-rc4|title=On the Precariousness of RC4|date=2013-03-20|archiveurl=https://web.archive.org/web/20131112235240/http://my.opera.com/securitygroup/blog/2013/03/20/on-the-precariousness-of-rc4|archivedate=2013-11-12|accessdate=2014-11-17}}</ref>}}
| {{Unknown}}
| {{Yes|Mitigated&#8203;<ref name="OperaLogjam"/>}}
| {{Yes|Yes<ref group="n" name="viasetting"/>}}
|-
| colspan="2" style="background:salmon;" | 12.18
| {{Yes|No}}
| {{Yes|Disabled by default}}
| {{Yes}}
| {{Yes}}<ref name="opera1218">{{Cite web|url=http://www.opera.com/blogs/security/2016/02/opera-12-and-opera-mail-security-update/|title=Opera 12 and Opera Mail security update|date=2016-02-16|accessdate=2016-02-17|url-status=live|archiveurl=https://web.archive.org/web/20160216143015/http://www.opera.com/blogs/security/2016/02/opera-12-and-opera-mail-security-update/|archivedate=2016-02-16}}</ref>
| {{Yes}}<ref name="opera1218"/>
| {{No}}
| {{Yes}}<br /><small>(only desktop)</small>
| {{Yes}}
| {{Yes}}<ref name="opera1218"/>
| {{Yes|Mitigated}}
| {{Yes|Not affected}}
| {{Yes|Mitigated}}
| {{Yes|Disabled by default}}&#8203;<ref group="n" name="RC4-disabled"/><ref name="opera1218"/>
| {{Yes|Mitigated&#8203;<ref name="opera1218"/>}}
| {{Yes|Mitigated&#8203;<ref name="OperaLogjam"/>}}
| {{Yes|Yes<ref group="n" name="viasetting"/>}}
|-
! Browser
! colspan="2" | Version
! Platforms
! SSL 2.0 (insecure)
! SSL 3.0 (insecure)
! TLS 1.0
! TLS 1.1
! TLS 1.2
! TLS 1.3
! EV certificate
! SHA-2 certificate
! ECDSA certificate
! BEAST
! CRIME
! POODLE (SSLv3)
! RC4
! FREAK
! Logjam
! Protocol selection by user
|-
! rowspan="12" | [[Software:Opera (web browser)|Opera Browser]]<br /><small>([[Software:Opera Mobile|Opera Mobile]])</small><br /><small>(Webkit and [[Software:Blink (layout engine)|Blink]])</small><br />{{refn |group="n" |name="note-f" |TLS support of Opera 14 and above is same as that of Chrome, because Opera has migrated to [[Software:Chromium (web browser)|Chromium]] backend (Opera 14 for Android is based on Chromium 26 with [[Software:WebKit|WebKit]],<ref name="dev.opera.com">{{cite web|url=https://dev.opera.com/blog/opera-14-for-android-is-out/|title=Dev.Opera — Opera 14 for Android Is Out!|date=2013-05-21|accessdate=2014-09-23|url-status=live|archiveurl=https://web.archive.org/web/20150130172538/https://dev.opera.com/blog/opera-14-for-android-is-out/|archivedate=2015-01-30}}</ref> and Opera 15 and above are based on Chromium 28 and above with [[Software:Blink (layout engine)|Blink]]<ref name="ReferenceB">{{cite web|url=https://dev.opera.com/blog/introducing-opera-15-for-desktop-and-a-fast-release-cycle/|title=Dev.Opera — Introducing Opera 15 for Computers, and a Fast Release Cycle|date=2013-07-02|accessdate=2014-09-23|url-status=live|archiveurl=https://web.archive.org/web/20140902081954/https://dev.opera.com/blog/introducing-opera-15-for-desktop-and-a-fast-release-cycle/|archivedate=2014-09-02}}</ref>).}}
| colspan="2" style="background:salmon;" | 14–16
| rowspan="12" | [[Software:Microsoft Windows|Windows&nbsp;<small>(7+)</small>]]<br /> [[Software:MacOS|OS X&nbsp;<small>(10.9+)</small>]]<br />[[Software:Linux|Linux]]<br />Android&nbsp;<small>(4.1+)</small>
| {{Yes|No}}
| {{No|Enabled by default}}
| {{Yes}}
| {{Yes}}<ref name="opera16">same as Chrome 26–29</ref>
| {{No}}<ref name="opera16"/>
| {{No}}
| {{Yes}}<br /><small>(only desktop)</small>
| {{Partial|<small>needs SHA-2 compatible OS</small>}}<ref name="SHA-2"/>
| {{Partial|<small>needs ECC compatible OS</small>}}<ref name="ECC"/>
| {{Yes|Not affected}}
| {{Yes|Mitigated}}
| {{No|Vulnerable}}
| {{No|Vulnerable}}
| {{No|Vulnerable<br /><small>(except Windows)</small>}}
| {{No|Vulnerable}}
| {{Partial|Temporary<br /><ref group="n" name="viacommandline"/>}}
|-
| colspan="2" style="background:salmon;" | 17–19
| {{Yes|No}}
| {{No|Enabled by default}}
| {{Yes}}
| {{Yes}}<ref name="opera17">same as Chrome 30 and later</ref>
| {{Yes}}<ref name="opera17"/>
| {{No}}
| {{Yes}}<br /><small>(only desktop)</small>
| {{Partial|<small>needs SHA-2 compatible OS</small>}}<ref name="SHA-2"/>
| {{Partial|<small>needs ECC compatible OS</small>}}<ref name="ECC"/>
| {{Yes|Not affected}}
| {{Yes|Mitigated}}
| {{No|Vulnerable}}
| {{No|Vulnerable}}
| {{No|Vulnerable<br /><small>(except Windows)</small>}}
| {{No|Vulnerable}}
| {{Partial|Temporary<br /><ref group="n" name="viacommandline"/>}}
|-
| colspan="2" style="background:salmon;" | 20–24
| {{Yes|No}}
| {{No|Enabled by default}}
| {{Yes}}
| {{Yes}}
| {{Yes}}
| {{No}}
| {{Yes}}<br /><small>(only desktop)</small>
| {{Partial|<small>needs SHA-2 compatible OS</small>}}<ref name="SHA-2"/>
| {{Partial|<small>needs ECC compatible OS</small>}}<ref name="ECC"/>
| {{Yes|Not affected}}
| {{Yes|Mitigated}}
| {{Partial|Partly mitigated<br />{{refn |group="n" |name="note-Opera20-POODLE"|TLS_FALLBACK_SCSV is implemented.<ref name="opera20">same as Chrome 33 and later</ref>}}}}
| {{Partial|Lowest priority<br /><ref name="opera20"/>}}
| {{No|Vulnerable<br /><small>(except Windows)</small>}}
| {{No|Vulnerable}}
| {{Partial|Temporary<br /><ref group="n" name="viacommandline"/>}}
|-
| colspan="2" style="background:salmon;" | 25, 26
| {{Yes|No}}
| {{No|Enabled by default<br />{{refn| group="n" | name="Opera25-SSL3.0"|SSL 3.0 is enabled by default, with some mitigations against known vulnerabilities such as BEAST and POODLE implemented.<ref name="OperaPOODLE"/>}}}}
| {{Yes}}
| {{Yes}}
| {{Yes}}
| {{No}}
| {{Yes}}<br /><small>(only desktop)</small>
| {{Yes}}
| {{Partial|<small>needs ECC compatible OS</small>}}<ref name="ECC"/>
| {{Yes|Not affected}}
| {{Yes|Mitigated}}
| {{Yes|Mitigated<br />{{refn|group="n"|name=note-opera25|In addition to TLS_FALLBACK_SCSV, "anti-POODLE record splitting" is implemented.<ref name="OperaPOODLE"/>}}}}
| {{Partial|Lowest priority}}
| {{No|Vulnerable<br /><small>(except Windows)</small>}}
| {{No|Vulnerable}}
| {{Partial|Temporary<br /><ref group="n" name="viacommandline"/>}}
|-
| colspan="2" style="background:salmon;" | 27
| {{Yes|No}}
| {{Yes|Disabled by default}}<br /><ref name="chromium693963003" />
| {{Yes}}
| {{Yes}}
| {{Yes}}
| {{No}}
| {{Yes}}<br /><small>(only desktop)</small>
| {{Yes}}
| {{Partial|<small>needs ECC compatible OS</small>}}<ref name="ECC"/>
| {{Yes|Not affected}}
| {{Yes|Mitigated}}
| {{Yes|Mitigated<br />{{refn|group="n"|name=note-opera27|In addition to TLS_FALLBACK_SCSV and "anti-POODLE record splitting", SSL 3.0 itself is disabled by default.<ref name="chromium693963003" />}}}}
| {{Partial|Lowest priority}}
| {{No|Vulnerable<br /><small>(except Windows)</small>}}
| {{No|Vulnerable}}
| {{Yes|Yes{{refn|group="n"|name="operaflags"|configure the minimum version of enabling protocols via opera://flags<ref name="chromium693963003" /> (the maximum version can be configured with command-line option)}}<br /><small>(only desktop)</small>}}
|-
| colspan="2" ! style="background:salmon;" | 28, 29
| {{Yes|No}}
| {{Yes|Disabled by default}}
| {{Yes}}
| {{Yes}}
| {{Yes}}
| {{No}}
| {{Yes}}<br /><small>(only desktop)</small>
| {{Yes}}
| {{Partial|<small>needs ECC compatible OS</small>}}<ref name="ECC"/>
| {{Yes|Not affected}}
| {{Yes|Mitigated}}
| {{Yes|Mitigated}}
| {{Partial|Lowest priority}}
| {{Yes|Mitigated}}
| {{No|Vulnerable}}
| {{Yes|Yes<ref group="n" name="operaflags"/><br /><small>(only desktop)</small>}}
|-
| colspan="2" ! style="background:salmon;" | 30
| {{Yes|No}}
| {{Yes|Disabled by default}}
| {{Yes}}
| {{Yes}}
| {{Yes}}
| {{No}}
| {{Yes}}<br /><small>(only desktop)</small>
| {{Yes}}
| {{Partial|<small>needs ECC compatible OS</small>}}<ref name="ECC"/>
| {{Yes|Not affected}}
| {{Yes|Mitigated}}
| {{Yes|Mitigated}}
| {{Partial|Only as fallback<br /><ref group="n" name="RC4fallback"/><ref name="chromeissue375342"/>}}
| {{Yes|Mitigated}}
| {{Yes|Mitigated&#8203;<ref name="OperaLogjam"/>}}
| {{Yes|Yes<ref group="n" name="operaflags"/><br /><small>(only desktop)</small>}}
|-
| colspan="2" style="background:salmon;" | 31–34
| {{Yes|No}}
| {{Yes|No}}<ref name="chromeissue436391"/>
| {{Yes}}
| {{Yes}}
| {{Yes}}
| {{No}}
| {{Yes}}<br /><small>(only desktop)</small>
| {{Yes}}
| {{Partial|<small>needs ECC compatible OS</small>}}<ref name="ECC"/>
| {{Yes|Not affected}}
| {{Yes|Mitigated}}
| {{Yes|Not affected}}
| {{Partial|Only as fallback<br /><ref group="n" name="RC4fallback"/><ref name="chromeissue375342"/>}}
| {{Yes|Mitigated}}
| {{Yes|Mitigated}}
| {{Partial|Temporary<br /><ref group="n" name="viacommandline"/>}}
|-
| colspan="2" style="background:salmon;" | 35, 36
| {{Yes|No}}
| {{Yes|No}}
| {{Yes}}
| {{Yes}}
| {{Yes}}
| {{No}}
| {{Yes}}<br /><small>(only desktop)</small>
| {{Yes}}
| {{Partial|<small>needs ECC compatible OS</small>}}<ref name="ECC"/>
| {{Yes|Not affected}}
| {{Yes|Mitigated}}
| {{Yes|Not affected}}
| {{Yes|Disabled by default}}&#8203;<ref group="n" name="RC4-disabled"/><ref name="RC4-Chrome48-1"/><ref name="RC4-Chrome48-2"/>
| {{Yes|Mitigated}}
| {{Yes|Mitigated}}
| {{Partial|Temporary<br /><ref group="n" name="viacommandline"/>}}
|-
| colspan="2" style="background:salmon;" | 37–40
| {{Yes|No}}
| {{Yes|No}}
| {{Yes}}
| {{Yes}}
| {{Yes}}
| {{No}}
| {{Yes}}<br /><small>(only desktop)</small>
| {{Yes}}
| {{Yes}}
| {{Yes|Not affected}}
| {{Yes|Mitigated}}
| {{Yes|Not affected}}
| {{Yes|Disabled by default}}&#8203;<ref group="n" name="RC4-disabled"/><ref name="RC4-Chrome48-1"/><ref name="RC4-Chrome48-2"/>
| {{Yes|Mitigated}}
| {{Yes|Mitigated}}
| {{Partial|Temporary<br /><ref group="n" name="viacommandline"/>}}
|-
| colspan="2" style="background:salmon;" | 41–56
| {{Yes|No}}
| {{Yes|No}}
| {{Yes}}
| {{Yes}}
| {{Yes}}
| {{Partial|Disabled by default}}<br /><small>(draft version)</small>
| {{Yes}}<br /><small>(only desktop)</small>
| {{Yes}}
| {{Yes}}
| {{Yes|Not affected}}
| {{Yes|Mitigated}}
| {{Yes|Not affected}}
| {{Yes|Disabled by default}}&#8203;<ref group="n" name="RC4-disabled"/><ref name="RC4-Chrome48-1"/><ref name="RC4-Chrome48-2"/>
| {{Yes|Mitigated}}
| {{Yes|Mitigated}}
| {{Partial|Temporary<br /><ref group="n" name="viacommandline"/>}}
|-
| style="background:salmon;" | 57, 58, 60
| style="background:#a0e75a;" | 62
| {{Yes|No}}
| {{Yes|No}}
| {{Yes}}
| {{Yes}}
| {{Yes}}
| {{Yes}}
| {{Yes}}<br /><small>(only desktop)</small>
| {{Yes}}
| {{Yes}}
| {{Yes|Not affected}}
| {{Yes|Mitigated}}
| {{Yes|Not affected}}
| {{Yes|Disabled by default}}&#8203;<ref group="n" name="RC4-disabled"/><ref name="RC4-Chrome48-1"/><ref name="RC4-Chrome48-2"/>
| {{Yes|Mitigated}}
| {{Yes|Mitigated}}
| {{Partial|Temporary<br /><ref group="n" name="viacommandline"/>}}
|-
! Browser
! colspan="2" | Version
! Platforms
! SSL 2.0 (insecure)
! SSL 3.0 (insecure)
! TLS 1.0
! TLS 1.1
! TLS 1.2
! TLS 1.3
! EV certificate
! SHA-2 certificate
! ECDSA certificate
! BEAST
! CRIME
! POODLE (SSLv3)
! RC4
! FREAK
! Logjam
! Protocol selection by user
|-
! rowspan="13" | [[Software:Safari (web browser)|Apple Safari]]<br />{{refn |group="n" |name="note-g" |Safari uses the operating system implementation on Mac OS X, Windows (XP, Vista, 7)<ref name="Adrian">{{cite web|last=Adrian|first=Dimcev|title=Common browsers/libraries/servers and the associated cipher suites implemented|url=http://www.carbonwind.net/TLS_Cipher_Suites_Project/tls_ssl_cipher_suites_annex_a1_main.docx|work=TLS Cipher Suites Project|url-status=live|archiveurl=https://www.webcitation.org/6FwL0CvUM?url=http://www.carbonwind.net/TLS_Cipher_Suites_Project/tls_ssl_cipher_suites_annex_a1_main.docx|archivedate=2013-04-17}}</ref> with unknown version,<ref name="Apple">{{cite web|author=Apple|url=https://www.apple.com/safari/features.html|title=Features|date=2009-06-10|accessdate=2009-06-10|url-status=live|archiveurl=https://www.webcitation.org/6FwL0oLMO?url=http://www.apple.com/safari/features.html|archivedate=2013-04-17}}</ref> Safari 5 is the last version available for Windows. OS X 10.8 on have SecureTransport support for TLS 1.1 and 1.2<ref name="curl.haxx.se">{{cite web|url=http://curl.haxx.se/mail/lib-2012-08/0120.html|title=Curl: Patch to add TLS 1.1 and 1.2 support & replace deprecated functions in SecureTransport|url-status=live|archiveurl=https://web.archive.org/web/20170301142904/https://curl.haxx.se/mail/lib-2012-08/0120.html|archivedate=2017-03-01}}</ref> Qualys SSL report simulates Safari 5.1.9 connecting with TLS 1.0 not 1.1 or 1.2<ref name="Qualys SSL Report: google.co.uk">[https://www.ssllabs.com/ssltest/analyze.html?d=google.co.uk&s=74.125.227.183 Qualys SSL Report: google.co.uk ] {{webarchive|url=https://web.archive.org/web/20170320192352/https://www.ssllabs.com/ssltest/analyze.html?d=google.co.uk&s=74.125.227.183 |date=2017-03-20}} (simulation Safari 5.1.9 TLS 1.0)</ref>}}
| colspan="2" style="background:salmon;" | 1
| style="background:salmon;" | Mac OS X 10.2, [[Software:Mac OS X Panther|10.3]]
| {{Yes|No<ref name=SafariSSL2>{{cite web|title=Apple Secures Mac OS X with Mavericks Release – eSecurity Planet|url=http://www.esecurityplanet.com/mac-os-security/apple-secures-mac-os-x-with-mavericks-release.html|date=2013-10-25|accessdate=2014-06-23|url-status=live|archiveurl=https://web.archive.org/web/20140708195022/http://www.esecurityplanet.com/mac-os-security/apple-secures-mac-os-x-with-mavericks-release.html|archivedate=2014-07-08}}</ref>}}
| {{No|Yes}}
| {{Yes}}
| {{No}}
| {{No}}
| {{No}}
| {{No}}
| {{No}}
| {{No}}
| {{No|Vulnerable}}
| {{Yes|Not affected}}
| {{No|Vulnerable}}
| {{No|Vulnerable}}
| {{No|Vulnerable}}
| {{No|Vulnerable}}
| {{No}}
|-
| colspan="2" style="background:salmon;" | 2–5
| style="background:salmon;" | Mac OS X [[Software:Mac OS X Tiger|10.4]], [[Software:Mac OS X Leopard|10.5]], [[Software:Windows XP|Win XP]]
| {{Yes|No}}
| {{No|Yes}}
| {{Yes}}
| {{No}}
| {{No}}
| {{No}}
| {{Partial|since v3.2}}
| {{No}}
| {{No}}
| {{No|Vulnerable}}
| {{Yes|Not affected}}
| {{No|Vulnerable}}
| {{No|Vulnerable}}
| {{No|Vulnerable}}
| {{No|Vulnerable}}
| {{No}}
|-
| colspan="2" style="background:salmon;" | 3–5
| <s>[[Software:Windows Vista|Vista]], [[Software:Windows 7|Win 7]]</s>
| {{Yes|No}}
| {{No|Yes}}
| {{Yes}}
| {{No}}
| {{No}}
| {{No}}
| {{Partial|since v3.2}}
| {{No}}
| {{Yes}}<ref name="ECC2"/>
| {{No|Vulnerable}}
| {{Yes|Not affected}}
| {{No|Vulnerable}}
| {{No|Vulnerable}}
| {{No|Vulnerable}}
| {{No|Vulnerable}}
| {{No}}
|-
| colspan="2" style="background:salmon;" | 4–6
| style="background:salmon;" | Mac OS X [[Software:Mac OS X Snow Leopard|10.6]], [[Software:Mac OS X Lion|10.7]]
| {{Yes|No}}
| {{No|Yes}}
| {{Yes}}
| {{No}}
| {{No}}
| {{No}}
| {{Yes}}
| {{Yes}}<ref name="SHA-2"/>
| {{Yes}}<ref name="ECC"/>
| {{No|Vulnerable}}
| {{Yes|Not affected}}
| {{No|Vulnerable}}
| {{No|Vulnerable}}
| {{No|Vulnerable}}
| {{No|Vulnerable}}
| {{No}}
|-
| colspan="2" style="background:salmon;" | 6
| style="background:salmon;" | [[Software:OS X Mountain Lion|OS X 10.8]]
| {{Yes|No}}
| {{No|Yes}}
| {{Yes}}
| {{No}}
| {{No}}
| {{No}}
| {{Yes}}
| {{Yes}}
| {{Yes}}<ref name="ECC"/>
| {{Yes|Mitigated<br />{{refn |group="n" |name="note-i" |In September 2013, Apple implemented BEAST mitigation in OS X 10.8 (Mountain Lion), but it was not turned on by default resulting in Safari still being theoretically vulnerable to the BEAST attack on that platform.<ref name="BEAST-Still">{{cite web|last=Ristic|first=Ivan|title=Is BEAST Still a Threat?|url=https://community.qualys.com/blogs/securitylabs/2013/09/10/is-beast-still-a-threat|work=qualys.com|url-status=live|archiveurl=https://web.archive.org/web/20141012121824/https://community.qualys.com/blogs/securitylabs/2013/09/10/is-beast-still-a-threat|archivedate=2014-10-12}}</ref><ref name="beast-mitigations-mavericks">{{cite web |first=Ivan |last=Ristić |url=http://blog.ivanristic.com/2013/10/apple-enabled-beast-mitigations-in-mavericks.html |title=Apple enabled BEAST mitigations in OS X 10.9 Mavericks |date=2013-10-31 |accessdate=2013-11-07 |url-status=live |archiveurl=https://web.archive.org/web/20131107045223/http://blog.ivanristic.com/2013/10/apple-enabled-beast-mitigations-in-mavericks.html |archivedate=2013-11-07}}</ref> BEAST mitigation has been enabled by default from OS X 10.8.5 updated in February 2014.<ref name="beast-mitigations-10.8">{{cite web |first=Ivan |last=Ristić |url=https://community.qualys.com/thread/12496 |title=Apple finally releases patch for BEAST |date=2014-02-26 |accessdate=2014-07-01 |url-status=live |archiveurl=https://web.archive.org/web/20140714162556/https://community.qualys.com/thread/12496 |archivedate=2014-07-14}}</ref>}}}}
| {{Yes|Not affected}}
| {{Partial|Mitigated<br />{{refn |group="n" |name="note-safari-poodle" |Because Apple removed support for all CBC protocols in SSL 3.0 to mitigate POODLE,<ref>{{cite web|url=http://support.apple.com/kb/HT6531|title=About Security Update 2014-005|url-status=live|archiveurl=https://web.archive.org/web/20141024181953/https://support.apple.com/kb/HT6531|archivedate=2014-10-24}}</ref><ref name="support.apple.com">{{cite web|url=http://support.apple.com/kb/HT6541|title=About the security content of iOS 8.1|url-status=live|archiveurl=https://web.archive.org/web/20141023104948/http://support.apple.com/kb/HT6541|archivedate=2014-10-23}}</ref> this leaves only RC4 which is also completely broken by the RC4 attacks in SSL 3.0.}}}}
| {{No|Vulnerable<br /><ref group="n" name="note-safari-poodle"/>}}
| {{Yes|Mitigated<br /><ref name=freak-OSX/>}}
| {{No|Vulnerable}}
| {{No}}
|-
| colspan="2" style="background:salmon;" | 7, 9
| style="background:salmon;" | [[Software:OS X Mavericks|OS X 10.9]]
| {{Yes|No}}
| {{No|Yes}}
| {{Yes}}
| {{Yes}}<ref name="MavericksTLS1.2">{{cite web|title=About the security content of OS X Mavericks v10.9|url=http://support.apple.com/kb/HT6011|accessdate=2014-06-20|url-status=live|archiveurl=https://web.archive.org/web/20140704220956/http://support.apple.com/kb/HT6011|archivedate=2014-07-04}}</ref>
| {{Yes}}<ref name="MavericksTLS1.2"/>
| {{No}}
| {{Yes}}
| {{Yes}}
| {{Yes}}
| {{Yes|Mitigated<br /><ref name="beast-mitigations-mavericks"/>}}
| {{Yes|Not affected}}
| {{Partial|Mitigated<br /><ref group="n" name="note-safari-poodle"/>}}
| {{No|Vulnerable<br /><ref group="n" name="note-safari-poodle"/>}}
| {{Yes|Mitigated<br /><ref name=freak-OSX/>}}
| {{No|Vulnerable}}
| {{No}}
|-
| colspan="2" style="background:salmon;" | 8–10
| style="background:salmon;" | [[Software:OS X Yosemite|OS X 10.10]]
| {{Yes|No}}
| {{No|Yes}}
| {{Yes}}
| {{Yes}}
| {{Yes}}
| {{No}}
| {{Yes}}
| {{Yes}}
| {{Yes}}
| {{Yes|Mitigated}}
| {{Yes|Not affected}}
| {{Partial|Mitigated<br /><ref group="n" name="note-safari-poodle"/>}}
| {{Partial|Lowest priority<br /><ref name="ssltest-safari-OSX1010">{{cite web | url=https://www.ssllabs.com/ssltest/viewClient.html?name=Safari&version=8&platform=OS%20X%2010.10 | title=User Agent Capabilities: Safari 8 / OS X 10.10 | publisher=Qualsys SSL Labs | accessdate=2015-03-07 | url-status=live | archiveurl=https://web.archive.org/web/20150906044018/https://www.ssllabs.com/ssltest/viewClient.html?name=Safari&version=8&platform=OS%20X%2010.10 | archivedate=2015-09-06}}</ref><ref group="n" name="note-safari-poodle"/>}}
| {{Yes|Mitigated<br /><ref name=freak-OSX>{{cite web | url=https://support.apple.com/en-us/HT204413 | title=About Security Update 2015-002 | accessdate=2015-03-09 | url-status=live | archiveurl=https://web.archive.org/web/20150316081731/https://support.apple.com/en-us/HT204413 | archivedate=2015-03-16}}</ref>}}
| {{Yes|Mitigated}}<br /><ref name=logjam-OSX>{{cite web|url=https://support.apple.com/en-us/HT204942|title=About the security content of OS X Yosemite v10.10.4 and Security Update 2015-005|accessdate=2015-07-03|url-status=live|archiveurl=https://web.archive.org/web/20150702202131/https://support.apple.com/en-us/HT204942|archivedate=2015-07-02}}</ref>
| {{No}}
|-
| colspan="2" style="background:salmon;"| 9–11
| style="background:salmon;" | [[Software:OS X El Capitan|OS X 10.11]]
| {{Yes|No}}
| {{Yes|No}}
| {{Yes}}
| {{Yes}}
| {{Yes}}
| {{No}}
| {{Yes}}
| {{Yes}}
| {{Yes}}
| {{Yes|Mitigated}}
| {{Yes|Not affected}}
| {{Yes|Not affected}}
| {{Partial|Lowest priority}}
| {{Yes|Mitigated}}
| {{Yes|Mitigated}}
| {{No}}
|-
| style="background:salmon;" | 10, 11
| style="background:#FFCC99;" | 12
| style="background:#FFCC99;" | [[Software:MacOS Sierra|macOS 10.12]]
| {{Yes|No}}
| {{Yes|No}}
| {{Yes}}
| {{Yes}}
| {{Yes}}
| {{No}}
| {{Yes}}
| {{Yes}}
| {{Yes}}
| {{Yes|Mitigated}}
| {{Yes|Not affected}}
| {{Yes|Not affected}}
| {{Yes|Disabled by default&#8203;<ref group="n" name="RC4-disabled"/>}}
| {{Yes|Mitigated}}
| {{Yes|Mitigated}}
| {{No}}
|-
| style="background:salmon;" | 11
| style="background:khaki;" | 12
| style="background:khaki;" | [[Software:MacOS High Sierra|macOS 10.13]]
| {{Yes|No}}
| {{Yes|No}}
| {{Yes}}
| {{Yes}}
| {{Yes}}
| {{No}}
| {{Yes}}
| {{Yes}}
| {{Yes}}
| {{Yes|Mitigated}}
| {{Yes|Not affected}}
| {{Yes|Not affected}}
| {{Yes|Disabled by default&#8203;<ref group="n" name="RC4-disabled"/>}}
| {{Yes|Mitigated}}
| {{Yes|Mitigated}}
| {{No}}
|-
| colspan="2" style="background:salmon;" | 12
| style="background:salmon;" | [[Software:MacOS Mojave|macOS 10.14.0–10.14.3]]
| {{Yes|No}}
| {{Yes|No}}
| {{Yes}}
| {{Yes}}
| {{Yes}}
| {{No}}
| {{Yes}}
| {{Yes}}
| {{Yes}}
| {{Yes|Mitigated}}
| {{Yes|Not affected}}
| {{Yes|Not affected}}
| {{Yes|Disabled by default&#8203;<ref group="n" name="RC4-disabled"/>}}
| {{Yes|Mitigated}}
| {{Yes|Mitigated}}
| {{No}}
|-
| colspan="2" style="background:#a0e75a;" | 12
| style="background:#a0e75a;" | [[Software:MacOS Mojave|macOS 10.14.4–10.14.5]]
| {{Yes|No}}
| {{Yes|No}}
| {{Yes}}
| {{Yes}}
| {{Yes}}
| {{Yes}}<ref name="dev.iachieved.it">{{cite web|url=https://dev.iachieved.it/iachievedit/tls-1-3-support-coming-with-safari-12-1|title=TLS 1.3 Support Coming with Safari 12.1|date=2019-02-23|website=iAchieved.it}}</ref>
| {{Yes}}
| {{Yes}}
| {{Yes}}
| {{Yes|Mitigated}}
| {{Yes|Not affected}}
| {{Yes|Not affected}}
| {{Yes|Disabled by default&#8203;<ref group="n" name="RC4-disabled"/>}}
| {{Yes|Mitigated}}
| {{Yes|Mitigated}}
| {{No}}
|-
| colspan="2"  {{table-experimental | 13 }}
| {{table-experimental |  [[Software:MacOS Catalina|macOS 10.15]]}}
| {{Yes|No}}
| {{Yes|No}}
| {{Yes}}
| {{Yes}}
| {{Yes}}
| {{Yes}}<ref name="dev.iachieved.it"/>
| {{Yes}}
| {{Yes}}
| {{Yes}}
| {{Yes|Mitigated}}
| {{Yes|Not affected}}
| {{Yes|Not affected}}
| {{Yes|Disabled by default&#8203;<ref group="n" name="RC4-disabled"/>}}
| {{Yes|Mitigated}}
| {{Yes|Mitigated}}
| {{No}}
|-
! Browser
! colspan="2" | Version
! Platforms
! SSL 2.0 (insecure)
! SSL 3.0 (insecure)
! TLS 1.0
! TLS 1.1
! TLS 1.2
! TLS 1.3
! EV certificate
! SHA-2 certificate
! ECDSA certificate
! BEAST
! CRIME
! POODLE (SSLv3)
! RC4
! FREAK
! Logjam
! Protocol selection by user
|-
! rowspan="11" | [[Software:Safari (web browser)|Apple Safari]]<br /><small>(mobile)</small><br />{{refn |group="n" |name="note-h" |Mobile Safari and third-party software utilizing the system UIWebView library use the [[Software:IOS|iOS]] operating system implementation, which supports TLS 1.2 as of iOS 5.0.<ref name="iOS5TLS1.2">{{cite web|author=Apple|title=Technical Note TN2287 – iOS 5 and TLS 1.2 Interoperability Issues|date=2011-10-14|accessdate=2012-12-10|url=https://developer.apple.com/library/ios/#technotes/tn2287/_index.html|url-status=live|archiveurl=https://web.archive.org/web/20110907013839/http://developer.apple.com/library/iOS/#technotes/tn2287/_index.html|archivedate=2011-09-07}}</ref><ref name="Liebowitz">{{cite web|last=Liebowitz|first=Matt|title=Apple issues huge software security patches|date=2011-10-13|accessdate=2012-12-10|work=NBCNews.com|url=http://www.nbcnews.com/id/44896639}}</ref><ref name="MWR Info Security">{{cite web|author=MWR Info Security|title=Adventures with iOS UIWebviews|date=2012-04-16|accessdate=2012-12-10|url=http://labs.mwrinfosecurity.com/blog/2012/04/16/adventures-with-ios-uiwebviews/|url-status=live|archiveurl=https://www.webcitation.org/6FwL2M2Mc?url=http://labs.mwrinfosecurity.com/blog/2012/04/16/adventures-with-ios-uiwebviews/|archivedate=2013-04-17}}, section "HTTPS (SSL/TLS)"</ref>}}
| colspan="2" style="background:salmon;" | 3
| style="background:salmon;" | iPhone OS [[Software:IPhone OS 1|1]], [[Software:IPhone OS 2|2]]
| {{Yes|No<ref>{{cite web|title=Secure Transport Reference|url=https://developer.apple.com/library/mac/documentation/security/Reference/secureTransportRef/Reference/reference.html#//apple_ref/c/tdef/SSLProtocol|accessdate=2014-06-23|url-status=live|archiveurl=https://web.archive.org/web/20140604052511/https://developer.apple.com/library/Mac/documentation/Security/Reference/secureTransportRef/Reference/reference.html#//apple_ref/c/tdef/SSLProtocol|archivedate=2014-06-04}} <code>kSSLProtocol2</code> is deprecated in iOS</ref>}}
| {{No|Yes}}
| {{Yes}}
| {{No}}
| {{No}}
| {{No}}
| {{No}}
| {{No}}
| {{No}}
| {{No|Vulnerable}}
| {{Yes|Not affected}}
| {{No|Vulnerable}}
| {{No|Vulnerable}}
| {{No|Vulnerable}}
| {{No|Vulnerable}}
| {{No}}
|-
| colspan="2" style="background:salmon;" | 4, 5
| style="background:salmon;" | [[Software:IPhone OS 3|iPhone OS 3]], [[Software:IOS 4|iOS 4]]
| {{Yes|No}}
| {{No|Yes}}
| {{Yes}}
| {{No}}
| {{No}}
| {{No}}
| {{Yes}}<ref name="theiphoneblog.com">{{cite web|title=iPhone 3.0: Mobile Safari Gets Enhanced Security Certificate Visualization|website=The iPhone Blog|url=http://www.theiphoneblog.com/2009/03/31/iphone-30-mobile-safari-enhanced-security-certificate-visualization/|date=2009-03-31|archive-url=https://web.archive.org/web/20090403074546/http://www.theiphoneblog.com/2009/03/31/iphone-30-mobile-safari-enhanced-security-certificate-visualization/|archivedate=2009-04-03}}</ref>
| {{Yes}}
| {{Partial|since iOS 4}}<ref name="ECC2"/>
| {{No|Vulnerable}}
| {{Yes|Not affected}}
| {{No|Vulnerable}}
| {{No|Vulnerable}}
| {{No|Vulnerable}}
| {{No|Vulnerable}}
| {{No}}
|-
| colspan="2" style="background:salmon;" | 5, 6
| style="background:salmon;" | iOS [[Software:IOS 5|5]], [[Software:IOS 6|6]]
| {{Yes|No}}
| {{No|Yes}}
| {{Yes}}
| {{Yes}}<ref name="iOS5TLS1.2"/>
| {{Yes}}<ref name="iOS5TLS1.2"/>
| {{No}}
| {{Yes}}
| {{Yes}}
| {{Yes}}
| {{No|Vulnerable}}
| {{Yes|Not affected}}
| {{No|Vulnerable}}
| {{No|Vulnerable}}
| {{No|Vulnerable}}
| {{No|Vulnerable}}
| {{No}}
|-
| colspan="2" style="background:salmon;" | 7
| style="background:salmon;" | [[Software:IOS 7|iOS 7]]
| {{Yes|No}}
| {{No|Yes}}
| {{Yes}}
| {{Yes}}
| {{Yes}}
| {{No}}
| {{Yes}}
| {{Yes}}
| {{Yes}}<ref name="ReferenceC">{{cite web|url=https://www.ssllabs.com/ssltest/viewClient.html?name=Safari&version=7&platform=iOS%207.1|title=Qualys SSL Labs – Projects / User Agent Capabilities: Safari 7 / iOS 7.1|url-status=live|archiveurl=https://web.archive.org/web/20170313130545/https://www.ssllabs.com/ssltest/viewClient.html?name=Safari&version=7&platform=iOS%207.1|archivedate=2017-03-13}}</ref>
| {{Yes|Mitigated<br /><ref name="beast-mitigations-ios7">{{cite web|author=schurtertom|title=SOAP Request fails randomly on one Server but works on another on iOS7|url=https://stackoverflow.com/q/19221568 |date=2013-10-11|accessdate=2014-01-05 |df=}}</ref>}}
| {{Yes|Not affected}}
| {{No|Vulnerable}}
| {{No|Vulnerable}}
| {{No|Vulnerable}}
| {{No|Vulnerable}}
| {{No}}
|-
| colspan="2" style="background:salmon;" | 8
| style="background:salmon;" | [[Software:IOS 8|iOS 8]]
| {{Yes|No}}
| {{No|Yes}}
| {{Yes}}
| {{Yes}}
| {{Yes}}
| {{No}}
| {{Yes}}
| {{Yes}}
| {{Yes}}
| {{Yes|Mitigated}}
| {{Yes|Not affected}}
| {{Partial|Mitigated<br /><ref group="n" name="note-safari-poodle"/>}}
| {{Partial|Lowest priority<br /><ref name="ssltest-safari-iOS812">{{cite web | url=https://www.ssllabs.com/ssltest/viewClient.html?name=Safari&version=8&platform=iOS%208.1.2 | title=User Agent Capabilities: Safari 8 / iOS 8.1.2 | publisher=Qualsys SSL Labs | accessdate=2015-03-07 | url-status=live | archiveurl=https://web.archive.org/web/20160304062526/https://www.ssllabs.com/ssltest/viewClient.html?name=Safari&version=8&platform=iOS%208.1.2 | archivedate=2016-03-04}}</ref><ref group="n" name="note-safari-poodle"/>}}
| {{Yes|Mitigated<br /><ref name=freak-iOS82>{{cite web | url=https://support.apple.com/en-us/HT204423 | title=About the security content of iOS 8.2 | accessdate=2015-03-09 | url-status=live | archiveurl=https://web.archive.org/web/20150309201042/https://support.apple.com/en-us/HT204423 | archivedate=2015-03-09}}</ref>}}
| {{Yes|Mitigated}}<br /><ref name=logjam-iOS84>{{cite web|url=https://support.apple.com/en-us/HT204941|title=About the security content of iOS 8.4|accessdate=2015-07-03|url-status=live|archiveurl=https://web.archive.org/web/20150703014410/https://support.apple.com/en-us/HT204941|archivedate=2015-07-03}}</ref>
| {{No}}
|-
| colspan="2" style="background:salmon;" | 9
| style="background:salmon;" | [[Software:IOS 9|iOS 9]]
| {{Yes|No}}
| {{Yes|No}}
| {{Yes}}
| {{Yes}}
| {{Yes}}
| {{No}}
| {{Yes}}
| {{Yes}}
| {{Yes}}
| {{Yes|Mitigated}}
| {{Yes|Not affected}}
| {{Yes|Not affected}}
| {{Partial|Lowest priority}}
| {{Yes|Mitigated}}
| {{Yes|Mitigated}}
| {{No}}
|-
| colspan="2" style="background:salmon;" | 10–11
| style="background:salmon;" | iOS [[Software:IOS 10|10]], [[Software:IOS 11|11]]
| {{Yes|No}}
| {{Yes|No}}
| {{Yes}}
| {{Yes}}
| {{Yes}}
| {{No}}
| {{Yes}}
| {{Yes}}
| {{Yes}}
| {{Yes|Mitigated}}
| {{Yes|Not affected}}
| {{Yes|Not affected}}
| {{Yes|Disabled by default&#8203;<ref group="n" name="RC4-disabled"/>}}
| {{Yes|Mitigated}}
| {{Yes|Mitigated}}
| {{No}}
|-
| colspan="2" style="background:salmon;" | 12
| style="background:salmon;" | [[Software:IOS 12|iOS 12.0–12.1]]
| {{Yes|No}}
| {{Yes|No}}
| {{Yes}}
| {{Yes}}
| {{Yes}}
| {{No}}
| {{Yes}}
| {{Yes}}
| {{Yes}}
| {{Yes|Mitigated}}
| {{Yes|Not affected}}
| {{Yes|Not affected}}
| {{Yes|Disabled by default&#8203;<ref group="n" name="RC4-disabled"/>}}
| {{Yes|Mitigated}}
| {{Yes|Mitigated}}
| {{No}}
|-
| colspan="2" style="background:#a0e75a;" | 12
| style="background:#a0e75a;" | [[Software:IOS 12|iOS 12.2–12.3]]
| {{Yes|No}}
| {{Yes|No}}
| {{Yes}}
| {{Yes}}
| {{Yes}}
| {{Yes}}<ref name="Pauly">{{cite mailing list|url=https://mailarchive.ietf.org/arch/msg/tls/5QjzTilqjomSyzENtgfaAqQOhbA|title=TLS 1.3 in iOS|first=Tommy|last=Pauly|date=2019-01-29|mailing-list=tls@ietf.org}}</ref> 
| {{Yes}}
| {{Yes}}
| {{Yes}}
| {{Yes|Mitigated}}
| {{Yes|Not affected}}
| {{Yes|Not affected}}
| {{Yes|Disabled by default&#8203;<ref group="n" name="RC4-disabled"/>}}
| {{Yes|Mitigated}}
| {{Yes|Mitigated}}
| {{No}}
|-
| rowspan="2" colspan="2" {{table-experimental | 13 }}
| {{table-experimental | [[Software:IOS 13|iOS 13]]}} 
| rowspan="2" ! {{Yes|No}}
| rowspan="2" !  {{Yes|No}}
| rowspan="2" !  {{Yes}}
| rowspan="2" !  {{Yes}}
| rowspan="2" !  {{Yes}}
| rowspan="2" !  {{Yes}}<ref name="Pauly"/> 
| rowspan="2" !  {{Yes}}
| rowspan="2" !  {{Yes}}
| rowspan="2" !  {{Yes}}
| rowspan="2" !  {{Yes|Mitigated}}
| rowspan="2" !  {{Yes|Not affected}}
| rowspan="2" !  {{Yes|Not affected}}
| rowspan="2" !  {{Yes|Disabled by default&#8203;<ref group="n" name="RC4-disabled"/>}}
| rowspan="2" !  {{Yes|Mitigated}}
| rowspan="2" !  {{Yes|Mitigated}}
| rowspan="2" !  {{No}}
|-
| {{table-experimental | [[Software:IPadOS 13|iPadOS 13]]}} 
|-
! rowspan="2" | Browser
! colspan="2" rowspan="2" | Version
! rowspan="2" | Platforms
! SSL 2.0 (insecure)
! SSL 3.0 (insecure)
! TLS 1.0
! TLS 1.1
! TLS 1.2
! TLS 1.3
! EV<br /><ref group="n" name="note-evssl"/>
! SHA-2
! ECDSA
! BEAST<ref group="n" name="note-BEASTmitigation"/>
! CRIME<ref group="n" name="note-CRIMEmitigation"/>
! POODLE (SSLv3)<ref group="n" name="note-POODLEmitigation"/>
! RC4<ref group="n" name="note-RC4mitigation"/>
! FREAK<ref name="note-FREAK-1"/><ref name="note-FREAK-2"/>
! Logjam
! rowspan="2" | Protocol selection by user
|-
! colspan="2" | SSL protocols
! colspan="4" | TLS protocols
! colspan="3" | Certificate Support
! colspan="6" | Vulnerabilities fixed
|}
{|class="wikitable" style="text-align: center; font-size: smaller;"
|-
|-
! colspan="2" | Color or Note
! rowspan="2" | Significance
|-
! Browser version
! Platform
|-
| {{table-experimental|}} Browser version
| {{table-experimental|}} Operating system
| Future release; under development
|-
| style="background:#a0e75a;" | Browser version
| style="background:#a0e75a;" | Operating system
| Current latest release
|-
| style="background:khaki;" | Browser version
| style="background:khaki;" | Operating system
| Former release; still supported
|-
| style="background:#FFCC99;" | Browser version
| style="background:#FFCC99;" | Operating system
| Former release; long-term support still active, but will end in less than 12 months
|-
| style="background:salmon;" | Browser version
| style="background:salmon;" | Operating system
| Former release; no longer supported
|-
| rowspan="3" style="background:darkgrey;" | n/a
| Operating system
| Mixed / Unspecified
|-
| Operating system <small>(Version+)</small>
| Minimum required operating system version (for supported versions of the browser)
|-
| <s>Operating system</s>
| No longer supported for this operating system
|}
;Notes
{{reflist |30em|group="n"}}

==Libraries==
{{Main|Comparison of TLS implementations}}
Most SSL and TLS programming libraries are free and open source software.
* [[Software:OpenSSL#BoringSSL|BoringSSL]], a fork of OpenSSL for Chrome/Chromium and Android as well as other Google applications.
* [[Software:Botan (programming library)|Botan]], a BSD-licensed cryptographic library written in C++.
* [[Software:Cryptlib|cryptlib]]: a portable open source cryptography library (includes TLS/SSL implementation)
* [[Delphi (programming language)|Delphi]] programmers may use a library called [[Internet Direct|Indy]] which utilizes [[Software:OpenSSL|OpenSSL]] or alternatively ICS which supports TLS 1.3 now.
* [[Software:GnuTLS|GnuTLS]]: a free implementation (LGPL licensed)
* [[Java Secure Socket Extension]]: a [[Java (programming language)|Java]] implementation included in the Java Runtime Environment supported TLS 1.1 and 1.2 starting with Java 7.  (TLS 1.1/1.2 were initially disabled by default for client on Java 7, but were enabled in January 2017.<ref name="Oracle">{{cite web |author=Oracle |url=https://bugs.openjdk.java.net/browse/JDK-7093640 |title=7093640: Enable client-side TLS 1.2 by default |accessdate=2018-08-30 }}</ref>)  Java 11 supports TLS 1.3.<ref name="bugs.openjdk.java.net">{{cite web |author=Oracle |url=https://bugs.openjdk.java.net/browse/JDK-8145252 |title=JEP 332: Transport Layer Security (TLS) 1.3 |accessdate=2018-08-30 }}</ref>
* [[Software:LibreSSL|LibreSSL]]: a fork of OpenSSL by OpenBSD project.
* [[Software:MatrixSSL|MatrixSSL]]: a dual licensed implementation
* [[Software:Mbed TLS|mbed TLS]] (previously PolarSSL): A tiny SSL library implementation for embedded devices that is designed for ease of use
* [[Software:Network Security Services|Network Security Services]]: [[FIPS 140]] validated open source library
* [[Software:OpenSSL|OpenSSL]]: a free implementation (BSD license with some extensions)
* [[Security Support Provider Interface|SChannel]]: an implementation of SSL and TLS [[Software:Microsoft Windows|Microsoft Windows]] as part of its package.
* Secure Transport: an implementation of SSL and TLS used in [[Software:OS X|OS X]] and [[Software:IOS|iOS]] as part of their packages.
* [[Software:WolfSSL|wolfSSL]] (previously CyaSSL): Embedded SSL/TLS Library with a strong focus on speed and size.

{| class="wikitable"
|+ Library support for TLS/SSL
|-
! Implementation
! SSL 2.0 (insecure)
! SSL 3.0 (insecure)
! TLS 1.0
! TLS 1.1
! TLS 1.2
! TLS 1.3

|-
! [[Software:Botan (programming library)|Botan]]
| {{Yes|No}}
| {{yes|No}}<ref name="Botan 1.11.13">{{cite web|url=http://botan.randombit.net/relnotes/1_11_13.html|title=Version 1.11.13, 2015-01-11 — Botan|date=2015-01-11|accessdate=2015-01-16|url-status=dead|archiveurl=https://web.archive.org/web/20150109154102/http://botan.randombit.net/relnotes/1_11_13.html|archivedate=2015-01-09}}</ref>
| {{yes}}
| {{yes}}
| {{yes}}
|
|-
! [[Software:Cryptlib|cryptlib]]
| {{Yes|No}}
| {{Yes|Disabled by default at compile time}}
| {{yes}}
| {{yes}}
| {{yes}}
|
|-
! [[Software:GnuTLS|GnuTLS]]
| {{Yes|No}}{{cref2|group=protocollibrary-table|a}}
| {{yes|Disabled by default}}<ref name=GnuTLS-3.4.0>{{cite web|url=http://lists.gnutls.org/pipermail/gnutls-devel/2015-April/007535.html|title=[gnutls-devel] GnuTLS 3.4.0 released|date=2015-04-08|accessdate=2015-04-16|url-status=live|archiveurl=https://web.archive.org/web/20150416005543/http://lists.gnutls.org/pipermail/gnutls-devel/2015-April/007535.html|archivedate=2015-04-16}}</ref>
| {{yes}}
| {{yes}}
| {{yes}}
| {{partial|yes}}<br /><small>(draft version)<ref name=GnuTLS-3.6.3>{{cite web|url=https://lists.gnupg.org/pipermail/gnutls-devel/2018-July/008584.html|title=[gnutls-devel] gnutls 3.6.3 |date=2018-07-16|accessdate=2018-09-16}}</ref></small>
|-
! [[Java Secure Socket Extension]]
| {{Yes|No}}{{cref2|group=protocollibrary-table|a}}
| {{Yes|Disabled by default}}<ref name="oracle.com">{{cite web|url=http://www.oracle.com/technetwork/java/javase/8u31-relnotes-2389094.html|title=Java™ SE Development Kit 8, Update 31 Release Notes|accessdate=2015-01-22|url-status=live|archiveurl=https://web.archive.org/web/20150121105601/http://www.oracle.com/technetwork/java/javase/8u31-relnotes-2389094.html|archivedate=2015-01-21}}</ref>
| {{yes}}
| {{yes}}
| {{yes}}
| {{yes}}
|-
! [[Software:LibreSSL|LibreSSL]]
| {{Yes|No}}<ref name=OpenBSD5.6>{{cite web|url=https://marc.info/?l=openbsd-announce&m=141486254309079&w=2|title=OpenBSD 5.6 Released|date=2014-11-01|accessdate=2015-01-20}}</ref>
| {{yes|No}}<ref name=libressl-2.3>{{cite web| title = LibreSSL 2.3.0 Released| url = https://marc.info/?l=openbsd-announce&m=144304330731220| date = 2015-09-23| accessdate = 2015-09-24}}</ref>
| {{yes}}
| {{yes}}
| {{yes}}
|
|-
! [[Software:MatrixSSL|MatrixSSL]]
| {{Yes|No}}
| {{yes|Disabled by default at compile time}}<ref name=Matrix-POODLE>{{cite web|url=http://www.matrixssl.org/news.html|title=MatrixSSL – News|accessdate=2014-11-09|url-status=dead|archiveurl=https://web.archive.org/web/20150214105056/http://www.matrixssl.org/news.html|archivedate=2015-02-14}}</ref>
| {{yes}}
| {{yes}}
| {{yes}}
| {{partial|yes}}<br /><small>(draft version)</small>
|-
! [[Software:Mbed TLS|mbed TLS]] (previously PolarSSL)
| {{Yes|No}}
| {{Yes|Disabled by default}}<ref name=mbed-2.0>{{cite web | title = mbed TLS 2.0.0 released | url = https://tls.mbed.org/tech-updates/releases/mbedtls-2.0.0-released | date = 2015-07-10 | accessdate = 2015-07-14 | url-status = live | archiveurl = https://web.archive.org/web/20150925030547/https://tls.mbed.org/tech-updates/releases/mbedtls-2.0.0-released | archivedate = 2015-09-25}}</ref>
| {{yes}}
| {{yes}}
| {{yes}}
|
|-
! [[Software:Network Security Services|Network Security Services]]
| {{yes|No}}{{cref2|group=protocolsupport|b}}
| {{Yes|Disabled by default}}<ref name=NSS-3.19>{{cite web|url=https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.19_release_notes|work=Mozilla Developer Network|title=NSS 3.19 release notes|publisher=Mozilla|accessdate=2015-05-06|url-status=live|archiveurl=https://web.archive.org/web/20150605054647/https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.19_release_notes|archivedate=2015-06-05}}</ref>
| {{yes}}
| {{yes}}<ref name=NSS-3.14>{{cite web|url=https://developer.mozilla.org/en-US/docs/NSS/NSS_3.14_release_notes|work=Mozilla Developer Network|title=NSS 3.14 release notes|publisher=Mozilla|accessdate=2012-10-27|url-status=live|archiveurl=https://web.archive.org/web/20130117130029/https://developer.mozilla.org/en-US/docs/NSS/NSS_3.14_release_notes|archivedate=2013-01-17}}</ref>
| {{yes}}<ref name=NSS-3.15.1>{{cite web|url=https://developer.mozilla.org/en-US/docs/NSS/NSS_3.15.1_release_notes|work=Mozilla Developer Network|title=NSS 3.15.1 release notes|publisher=Mozilla|accessdate=2013-08-10|url-status=live|archiveurl=https://web.archive.org/web/20130922223238/https://developer.mozilla.org/en-US/docs/NSS/NSS_3.15.1_release_notes|archivedate=2013-09-22}}</ref>
| {{yes}}<ref name="NSS 3.39 release notes">{{cite web|title=NSS 3.39 release notes |url=https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.39_release_notes#Notable_Changes_in_NSS_3.39 |date=2018-08-31 |accessdate=2018-09-14}}</ref>
|-
! [[Software:OpenSSL|OpenSSL]]
| {{Yes|No}}<ref name="OpenSSL 1.1.0 Series Release Notes">{{cite web|url=https://www.openssl.org/news/openssl-1.1.0-notes.html|title=OpenSSL 1.1.0 Series Release Notes|accessdate=2016-10-02|url-status=live|archiveurl=https://web.archive.org/web/20160825171308/https://www.openssl.org/news/openssl-1.1.0-notes.html|archivedate=2016-08-25}}</ref>
| {{No|Enabled by default}}
| {{yes}}
| {{yes}}<ref name=openssl-1.0.1-note>{{cite web|title=Major changes between OpenSSL 1.0.0h and OpenSSL 1.0.1 [14 Mar 2012] |url=https://www.openssl.org/news/openssl-1.0.1-notes.html |date=2012-03-14 |accessdate=2015-01-20 |url-status=dead |archiveurl=https://web.archive.org/web/20150120120428/https://www.openssl.org/news/openssl-1.0.1-notes.html |archivedate=January 20, 2015}}</ref>
| {{yes}}<ref name=openssl-1.0.1-note />
| {{yes}}<ref name="OpenSSL 1.1.1 Is Released">{{cite web|title=OpenSSL 1.1.1 Is Released |url=https://www.openssl.org/blog/blog/2018/09/11/release111/ |date=2018-09-11 |accessdate=2018-09-14}}</ref>
|-
! [[Software:RSA BSAFE|RSA BSAFE]]<ref name=RSABSAFETECH>{{cite web| title = RSA BSAFE Technical Specification Comparison Tables| url = http://www.emc.com/collateral/data-sheet/11433-bsafe-tech-table.pdf| url-status = live| archiveurl = https://web.archive.org/web/20150924043531/http://www.emc.com/collateral/data-sheet/11433-bsafe-tech-table.pdf| archivedate = 2015-09-24}}</ref>
| {{yes|No}}
| {{No|Yes}}
| {{yes}}
| {{yes}}
| {{yes}}
|
|-
! SChannel XP / 2003<ref name=XP2003schannel>[https://msdn.microsoft.com/en-us/library/windows/desktop/aa380512%28v=vs.85%29.aspx TLS cipher suites in Microsoft Windows XP and 2003] {{webarchive|url=https://web.archive.org/web/20150118053924/http://msdn.microsoft.com/en-us/library/windows/desktop/aa380512(v=vs.85).aspx |date=2015-01-18}}</ref>
| {{Partial|Disabled by default by MSIE 7}}
| {{No|Enabled by default}}
| {{partial|Enabled by default by MSIE 7}}
| {{no}}
| {{no}}
| {{no}}
|-
! SChannel Vista<ref name=Vista2008schannel>[https://msdn.microsoft.com/en-us/library/windows/desktop/ff468651%28v=vs.85%29.aspx SChannel Cipher Suites in Microsoft Windows Vista] {{webarchive|url=https://web.archive.org/web/20150112014148/http://msdn.microsoft.com/en-us/library/windows/desktop/ff468651(v=vs.85).aspx |date=2015-01-12}}</ref>
| {{Yes|Disabled by default}}
| {{No|Enabled by default}}
| {{yes}}
| {{no}}
| {{no}}
| {{no}}
|-
! SChannel 2008<ref name=Vista2008schannel/>
| {{Yes|Disabled by default}}
| {{No|Enabled by default}}
| {{yes}}
| {{Partial|<small>Disabled by default (KB4019276)<ref name="2008R1TLS1.2"/></small>}}
| {{Partial|<small>Disabled by default (KB4019276)<ref name="2008R1TLS1.2"/></small>}}
| {{no}}
|-
! SChannel 7 / 2008 R2<ref name=Windows7schannel>[https://msdn.microsoft.com/en-us/library/windows/desktop/aa374757%28v=vs.85%29.aspx TLS Cipher Suites in SChannel for Windows 7, 2008R2, 8, 2012] {{webarchive|url=https://web.archive.org/web/20150319043951/https://msdn.microsoft.com/en-us/library/windows/desktop/aa374757(v=vs.85).aspx |date=2015-03-19}}</ref>
| {{Yes|Disabled by default}}
| {{partial|Disabled by default in MSIE 11}}
| {{yes}}
| {{partial|Enabled by default by MSIE 11}}
| {{partial|Enabled by default by MSIE 11}}
| {{no}}
|-
! SChannel 8 / 2012<ref name=Windows7schannel/>
| {{Yes|Disabled by default}}
| {{No|Enabled by default}}
| {{yes}}
| {{partial|Disabled by default}}
| {{partial|Disabled by default}}
| {{no}}
|-
! SChannel 8.1 / 2012 R2, 10 v1507 & v1511<ref name=Windows7schannel/>
| {{Yes|Disabled by default}}
| {{partial|Disabled by default in MSIE 11}}
| {{yes}}
| {{yes}}
| {{yes}}
| {{no}}
|-
! SChannel 10 v1607 / 2016<ref name="Windows10_v1607schannel">{{Cite web |date=2017-03-21 |url=https://technet.microsoft.com/en-us/windows-server-docs/security/tls/tls-schannel-ssp-changes-in-windows-10-and-windows-server-2016 |title=TLS (Schannel SSP) changes in Windows 10 and Windows Server 2016 |publisher=Microsoft |accessdate=2017-03-29 |url-status=dead |archiveurl=https://web.archive.org/web/20170330011044/https://technet.microsoft.com/en-us/windows-server-docs/security/tls/tls-schannel-ssp-changes-in-windows-10-and-windows-server-2016 |archivedate=2017-03-30}}</ref>
| {{Yes|No}}
| {{Yes|Disabled by default}}
| {{yes}}
| {{yes}}
| {{yes}}
| {{no}}
|-
! Secure Transport OS X 10.2–10.8 / iOS 1–4
| {{No|Yes}}
| {{No|Yes}}
| {{yes}}
| {{no}}
| {{no}}
|
|-
! Secure Transport OS X 10.9–10.10 / iOS 5–8
| {{Yes|No}}{{cref2|group=protocollibrary-table|c}}
| {{No|Yes}}
| {{yes}}
| {{yes}}{{cref2|group=protocollibrary-table|c}}
| {{yes}}{{cref2|group=protocollibrary-table|c}}
|
|-
! Secure Transport OS X 10.11 / iOS 9
| {{Yes|No}}
| {{Yes|No}}{{cref2|group=protocollibrary-table|c}}
| {{yes}}
| {{yes}}
| {{yes}}
|
|-
! [[Seed7]] [http://seed7.sourceforge.net/libraries/tls.htm TLS/SSL Library]
| {{Yes|No}}
| {{No|Yes}}
| {{yes}}
| {{yes}}
| {{yes}}
|
|-
! [[Software:WolfSSL|wolfSSL]] (previously CyaSSL)
| {{Yes|No}}
| {{Yes|Disabled by default}}<ref name=wolfSSL-3.6.6>{{cite web|url=http://wolfssl.com/wolfSSL/Blog/Entries/2015/8/24_wolfSSL_3.6.6_is_Now_Available.html|title=[wolfssl] wolfSSL 3.6.6 Released|date=2015-08-20|accessdate=2015-08-25|url-status=live|archiveurl=https://web.archive.org/web/20151017033726/https://wolfssl.com/wolfSSL/Blog/Entries/2015/8/24_wolfSSL_3.6.6_is_Now_Available.html|archivedate=2015-10-17}}</ref>
| {{yes}}
| {{yes}}
| {{yes}}
| {{partial|yes}}<br /><small>(draft version)</small><ref name="wolfSSL TLS 1.3 support">{{cite web|url=https://github.com/wolfSSL/wolfssl/pull/661|title=[wolfssl] wolfSSL TLS1.3 support|date=2017-02-13|accessdate=2017-02-13}}</ref>
|- class="sortbottom"
! Implementation
! SSL 2.0 (insecure)
! SSL 3.0 (insecure)
! TLS 1.0
! TLS 1.1
! TLS 1.2
! TLS 1.3
|}
{{cnote2 begin | liststyle=lower-alpha}}
{{cnote2 | group=protocolsupport | b | Server-side implementation of the SSL/TLS protocol still supports processing of received v2-compatible client hello messages.<ref name=NSS-3.24>{{cite web|url=https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.24_release_notes|work=Mozilla Developer Network|title=NSS 3.24 release notes|publisher=Mozilla|accessdate=2016-06-19|url-status=live|archiveurl=https://web.archive.org/web/20160826100711/https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.24_release_notes|archivedate=2016-08-26}}</ref>}}
{{cnote2 | group=protocollibrary-table | c | Secure Transport: SSL 2.0 was discontinued in OS X 10.8. SSL 3.0 was discontinued in OS X 10.11 and iOS 9. TLS 1.1 and 1.2 are available on iOS 5.0 and later, and OS X 10.9 and later.<ref>{{cite web|url=https://developer.apple.com/library/ios/technotes/tn2287/|work=iOS Developer Library|title=Technical Note TN2287: iOS 5 and TLS 1.2 Interoperability Issues|publisher=Apple Inc.|accessdate=2012-05-03|url-status=live|archiveurl=https://web.archive.org/web/20150403092122/https://developer.apple.com/library/ios/technotes/tn2287/|archivedate=2015-04-03}}</ref>}}<ref>[https://dev.ssllabs.com/ssltest/clients.html Qualys SSL Labs – Projects / User Agent Capabilities<!-- Bot generated title -->] {{webarchive|url=https://web.archive.org/web/20150919073935/https://dev.ssllabs.com/ssltest/clients.html |date=2015-09-19}}</ref>
{{cnote2 end}}

A paper presented at the 2012 [[Organization:Association for Computing Machinery|ACM]] conference on computer and communications security<ref>{{cite book|author=Georgiev, Martin and Iyengar, Subodh and Jana, Suman and Anubhai, Rishita and Boneh, Dan and Shmatikov, Vitaly|title=The most dangerous code in the world: validating SSL certificates in non-browser software. Proceedings of the 2012 ACM conference on Computer and communications security|year=2012|isbn=978-1-4503-1651-4|url=http://www.cs.utexas.edu/~shmat/shmat_ccs12.pdf|pages=38–49|url-status=live|archiveurl=https://web.archive.org/web/20171022194807/http://www.cs.utexas.edu/~shmat/shmat_ccs12.pdf|archivedate=2017-10-22}}</ref> showed that few applications used some of these SSL libraries correctly, leading to vulnerabilities. According to the authors
<blockquote>"the root cause of most of these vulnerabilities is the terrible design of the APIs to the underlying SSL libraries. Instead of expressing high-level security properties of network tunnels such as confidentiality and authentication, these APIs expose low-level details of the SSL protocol to application developers. As a consequence, developers often use SSL APIs incorrectly, misinterpreting and misunderstanding their manifold parameters, options, side effects, and return values."</blockquote>

===Other uses===
The [[Simple Mail Transfer Protocol]] (SMTP) can also be protected by TLS. These applications use [[Public key certificate|public key certificate]]s to verify the identity of endpoints.

TLS can also be used to tunnel an entire network stack to create a [[Virtual private network|VPN]], as is the case with [[Software:OpenVPN|OpenVPN]] and [[Software:OpenConnect|OpenConnect]]. Many vendors now marry TLS's encryption and authentication capabilities with authorization. There has also been substantial development since the late 1990s in creating client technology outside of the browser to enable support for client/server applications. When compared against traditional [[IPsec]] VPN technologies, TLS has some inherent advantages in firewall and NAT traversal that make it easier to administer for large remote-access populations.

TLS is also a standard method to protect [[Session Initiation Protocol]] (SIP) application signaling. TLS can be used to provide authentication and encryption of the SIP signaling associated with VoIP and other SIP-based applications.{{citation needed|date=December 2013}}

==References==
{{Reflist|30em}}
{{FOLDOC}}



[[Category:Transport Layer Security]]

{{Sourceattribution|Transport Layer Security Adoption|1}}