Version history for TLS/SSL support in web browsers

Version history for TLS/SSL support in web browsers tracks the implementation of Transport Layer Security protocol versions in major web browsers. +TLS/SSL support history of web browsersBrowseror OS APIVersionPlatformsSSL protocolsTLS protocolsCertificate supportVulnerabilityProtocol selection by userWhether a user or administrator can choose the protocols to be used or not. If yes, several attacks such as BEAST (vulnerable in SSL 3.0 and TLS 1.0) or POODLE (vulnerable in SSL 3.0) can be avoided.SSL 2.0 (insecure)SSL 3.0 (insecure)TLS 1.0 (deprecated)TLS 1.1 (deprecated)TLS 1.2TLS 1.3EVWhether EV SSL and DV SSL (normal SSL) can be distinguished by indicators (green lock icon, green address bar, etc.) or not.SHA-2ECDSABEASTe.g. 1/n-1 record splitting.CRIMEe.g. Disabling header compression in HTTPS/SPDY.POODLE (SSLv3)Complete mitigations; disabling SSL 3.0 itself, "anti-POODLE record splitting". "Anti-POODLE record splitting" is effective only with client-side implementation and valid according to the SSL 3.0 specification, however, it may also cause compatibility issues due to problems in server-side implementations. Partial mitigations; disabling fallback to SSL 3.0, TLS_FALLBACK_SCSV, disabling cipher suites with CBC mode of operation. If the server also supports TLS_FALLBACK_SCSV, the POODLE attack will fail against this combination of server and browser, but connections where the server does not support TLS_FALLBACK_SCSV and does support SSL 3.0 will still be vulnerable. If disabling cipher suites with CBC mode of operation in SSL 3.0, only cipher suites with RC4 are available, RC4 attacks become easier. When disabling SSL 3.0 manually, POODLE attack will fail.RC4Complete mitigation; disabling cipher suites with RC4. Partial mitigations to keeping compatibility with old systems; setting the priority of RC4 to lower.FREAKLogjamGoogle Chrome(Chrome for Android)1–9Windows (10+)macOS (13+)LinuxAndroid (10+)iOS (18+)ChromeOSNo(only desktop)10–20No(only desktop)21No(only desktop)22–29(only desktop)30–32(only desktop)33–37(only desktop)38, 39(only desktop)40(only desktop)41, 42(only desktop)43(only desktop)44–47(only desktop)48, 49(only desktop)50–53(only desktop)54–66(draft version)(only desktop)67–69(draft version)(only desktop)70–83(only desktop)84–90(only desktop)91–151 / 153rowspan=2 rowspan=2 rowspan=2 rowspan=2 rowspan=2 rowspan=2 rowspan=2 (only desktop)rowspan=2 rowspan=2 rowspan=2 rowspan=2 rowspan=2 rowspan=2 rowspan=2 rowspan=2 rowspan=2 154Browseror OS APIVersionPlatformsSSL 2.0 (insecure)SSL 3.0 (insecure)TLS 1.0 (deprecated)TLS 1.1 (deprecated)TLS 1.2TLS 1.3EV certificateSHA-2 certificateECDSA certificateBEASTCRIMEPOODLE (SSLv3)RC4FREAKLogjamProtocol selection by userMicrosoft Edge(Chromium-based)OS-independent79–83Windows (10+)macOS (13+)Linux Android (10+)iOS (18+)84–9091–151 / 153rowspan=2 rowspan=2 rowspan=2 rowspan=2 rowspan=2 rowspan=2 rowspan=2 rowspan=2 rowspan=2 rowspan=2 rowspan=2 rowspan=2 rowspan=2 rowspan=2 rowspan=2 rowspan=2 154Browseror OS APIVersionPlatformsSSL 2.0 (insecure)SSL 3.0 (insecure)TLS 1.0 (deprecated)TLS 1.1 (deprecated)TLS 1.2TLS 1.3EV certificateSHA-2 certificateECDSA certificateBEASTCRIMEPOODLE (SSLv3)RC4FREAKLogjamProtocol selection by userMozilla Firefox(Firefox for mobile)1.0, 1.5Windows (10+)macOS (10.15+)LinuxAndroid (8.0+)iOS (15+)Firefox OSMaemoESR 153 only for:Windows (10+)macOS (10.15+)LinuxESR 115 only for:Windows 7–8.1macOS 10.12–10.14No2No3–7No8–10No11–14No15–22NoNo2324, 25.0.025.0.1, 2627–3334, 3536–3839–4344–48All RC4 cipher suites are disabled by default.49–59(draft version)60–62(draft version)63–7778–156rowspan=4 rowspan=4 rowspan=4 rowspan=4 rowspan=4 rowspan=4 rowspan=4 rowspan=4 rowspan=4 rowspan=4 rowspan=4 rowspan=4 rowspan=4 rowspan=4 rowspan=4 rowspan=4 157Browseror OS APIVersionPlatformsSSL 2.0 (insecure)SSL 3.0 (insecure)TLS 1.0 (deprecated)TLS 1.1 (deprecated)TLS 1.2TLS 1.3EV certificateSHA-2 certificateECDSA certificateBEASTCRIMEPOODLE (SSLv3)RC4FREAKLogjamProtocol selection by userMicrosoft Internet Explorer(1–10)Windows Schannel1.xWindows 3.1, 95, NT,Windows NT 3.1 supports IE 1–2, Windows NT 3.5 supports IE 1–3, Windows NT 3.51 and Windows NT 4.0 supports IE 1–6.Mac OS 7, 8No SSL/TLS support2NoNoNoNo SSL 3.0 or TLS support3NoNo4, 5, 6Windows 3.1, 95, 98, NT, 2000Mac OS 7.1, 8, X,Solaris, HP-UXNo6Windows XPNoMS13-095 or MS14-049 for Windows Server 2003, Windows XP x64 and Windows XP SP3 (32-bit).7, 8No6Server 2003No7, 8No7, 8, 9Windows VistaNoServer 2008(KB4019276)8, 9, 107, 8Server 2008 R2Server 2012Internet Explorer 11Windows Schannel117, 8.1Server 2008 R2Server 2012Server 2012 R2Browseror OS APIVersionPlatformsSSL 2.0 (insecure)SSL 3.0 (insecure)TLS 1.0 (deprecated)TLS 1.1 (deprecated)TLS 1.2TLS 1.3EV certificateSHA-2 certificateECDSA certificateBEASTCRIMEPOODLE (SSLv3)RC4FREAKLogjamProtocol selection by userMicrosoft Edge(12–18)(EdgeHTML-based)Client onlyInternet Explorer 11Windows Schannel1112–13Windows 10 1507–15111114–18(client only)Windows 10 1607–2004Windows Server (SAC)1709–2004Internet Explorer 11Windows Schannel11Windows 10 20H2–22H2Windows Server (SAC)20H2Windows SchannelWindows 11 21H2–22H2(Ent/Edu/Home/Pro)Windows 11 23H2(Home/Pro)rowspan=2 rowspan=2 rowspan=2 rowspan=2 rowspan=2 rowspan=2 rowspan=2 rowspan=2 rowspan=2 rowspan=2 rowspan=2 rowspan=2 rowspan=2 rowspan=2 rowspan=2 rowspan=2 Windows 11 23H2(Ent/Edu)Windows 11 24H2(Home/Pro)rowspan=2 rowspan=2 rowspan=2 rowspan=2 rowspan=2 rowspan=2 rowspan=2 rowspan=2 rowspan=2 rowspan=2 rowspan=2 rowspan=2 rowspan=2 rowspan=2 rowspan=2 rowspan=2 Windows 11 24H2(Ent/Edu)Windows 11 25H2(Home/Pro)Windows 11 25H2(Ent/Edu)Windows 11 26H1(Specific ARM SoCs only)https://techcommunity.microsoft.com/blog/windows-itpro-blog/what-to-know-about-windows-11-version-26h1/4491941Windows 11 26H2(Ent/Edu/Home/Pro)Internet Explorer 11LTSB/LTSCWindows SchannelLTSB/LTSC11Windows 10LTSB 2015 (1507)Windows 10LTSB 2016 (1607)Windows Server 2016(LTSB/1607)Windows 10LTSC 2019 (1809)Windows Server 2019(LTSC/1809)Windows 10LTSC 2021 (21H2)Windows Server 2022(LTSC/21H2)Windows SchannelLTSCWindows 11LTSC 2024 (24H2)Windows Server 2025(LTSC/24H2)Browseror OS APIVersionPlatformsSSL 2.0 (insecure)SSL 3.0 (insecure)TLS 1.0 (deprecated)TLS 1.1 (deprecated)TLS 1.2TLS 1.3EV certificateSHA-2 certificateECDSA certificateBEASTCRIMEPOODLE (SSLv3)RC4FREAKLogjamProtocol selection by userMicrosoft Internet Explorer Mobile7–9Windows Phone 7, 7.5, 7.8No10Windows Phone 811Windows Phone 8.1Microsoft Edge(13–15)(EdgeHTML-based)Edge (formerly known as Project Spartan) is based on a fork of the Internet Explorer 11 rendering engine.13Windows 10 Mobile 151114, 15Windows 10 Mobile1607–1709Browseror OS APIVersionPlatformsSSL 2.0 (insecure)SSL 3.0 (insecure)TLS 1.0 (deprecated)TLS 1.1 (deprecated)TLS 1.2TLS 1.3EV certificateSHA-2 certificateECDSA certificateBEASTCRIMEPOODLE (SSLv3)RC4FREAKLogjamProtocol selection by userApple Safari1Mac OS X 10.2, 10.3No2–5Mac OS X 10.4, 10.5, Win XPNo3–5Vista, Win 7No4–6Mac OS X 10.6, 10.7No6OS X 10.8No7, 9OS X 10.98–10OS X 10.109–11OS X 10.1110–13macOS10.12, 10.1312–14macOS 10.1413–26macOS 10.15, 11, 12, 13, 1418–2627macOS 152627macOS 2627macOS 27Browseror OS APIVersionPlatformsSSL 2.0 (insecure)SSL 3.0 (insecure)TLS 1.0 (deprecated)TLS 1.1 (deprecated)TLS 1.2TLS 1.3EV certificateSHA-2 certificateECDSA certificateBEASTCRIMEPOODLE (SSLv3)RC4FREAKLogjamProtocol selection by userApple Safari(mobile)3iPhone OS 1, 2No4, 5iPhone OS 3, iOS 4No5, 6iOS 5, 67iOS 78iOS 89iOS 910, 11iOS 10, 1112iOS 1213–17iOS13–17rowspan=2 rowspan=2 rowspan=2 rowspan=2 rowspan=2 rowspan=2 rowspan=2 rowspan=2 rowspan=2 rowspan=2 rowspan=2 rowspan=2 rowspan=2 rowspan=2 rowspan=2 rowspan=2 iPadOS13–1718iOS 18rowspan=2 rowspan=2 rowspan=2 rowspan=2 rowspan=2 rowspan=2 rowspan=2 rowspan=2 rowspan=2 rowspan=2 rowspan=2 rowspan=2 rowspan=2 rowspan=2 rowspan=2 rowspan=2 iPadOS 1826iOS 26rowspan=2 rowspan=2 rowspan=2 rowspan=2 rowspan=2 rowspan=2 rowspan=2 rowspan=2 rowspan=2 rowspan=2 rowspan=2 rowspan=2 rowspan=2 rowspan=2 rowspan=2 rowspan=2 iPadOS 2627iOS 27rowspan=2 rowspan=2 rowspan=2 rowspan=2 rowspan=2 rowspan=2 rowspan=2 rowspan=2 rowspan=2 rowspan=2 rowspan=2 rowspan=2 rowspan=2 rowspan=2 rowspan=2 rowspan=2 iPadOS 27Browseror OS APIVersionPlatformsSSL 2.0 (insecure)SSL 3.0 (insecure)TLS 1.0 (deprecated)TLS 1.1 (deprecated)TLS 1.2TLS 1.3EVSHA-2ECDSABEASTCRIMEPOODLE (SSLv3)RC4FREAKLogjamProtocol selection by userGoogle Android OSAndroid 1.0–4.0.4NoAndroid 4.1–4.4.4Android 5.0–5.0.2Android 5.1–5.1.1Android 6.0–7.1.2Android 8.0–9Android 10–13Android 14Android 15Android 16Android 17Browseror OS APIVersionPlatformsSSL 2.0 (insecure)SSL 3.0 (insecure)TLS 1.0 (deprecated)TLS 1.1 (deprecated)TLS 1.2TLS 1.3EV certificateSHA-2 certificateECDSA certificateBEASTCRIMEPOODLE (SSLv3)RC4FREAKLogjamProtocol selection by user Color or NoteSignificanceBrowser versionPlatform Browser version Operating systemFuture release; under developmentBrowser versionOperating systemCurrent latest releaseBrowser versionOperating systemFormer release; still supportedBrowser versionOperating systemFormer release; long-term support still active, but will end in less than 12 monthsBrowser versionOperating systemFormer release; no longer supportedrowspan=3Operating systemMixed/UnspecifiedOperating system (Version+)Minimum required operating system version (for supported versions of the browser)Operating systemNo longer supported for this operating system Notes

References