TLS configuration now fixed to block 1.0

Azure Updates

Discussionpowered by zap.ms

Published

Jun 13, 2018

Timeline

  • June 2018
    General Availability

Product

App Service
Azure Functions

Tag

Compliance

Category

Compute
Mobile
Web
Containers
Internet of Things

Description

We recently announced that all Azure App Service and Azure Functions apps could update TLS configuration. However, after deployment, an edge case scenario was identified involving SNI-SSL. This scenario led to SSL-analyzing tools, such as SSL Labs, showing that TLS 1.0 was still accepted, while higher versions were selected.

We have now completed the deployment, which solves the issue for SSI-SSL. Reporting tools should correctly indicate that lower versions of TLS (mainly TLS 1.0) are blocked.

For more details on this update and how to apply TLS configuration to your app, see the team blog.