IS TLS 1.0 and 1.1 really ready to go?

Livewire says yes, and articles out there have more

The last several days on Livewire have been quite interesting. Last week, I experienced a technical issue which has since been resolved. On top of that, I was notified that the site was upgraded to only work on 1.2 or higher TLS connections. Sans News Bites talks about this in one of their segments and this blog post entitled: It’s the Boot for TLS 1.0 and TLS 1.1 is one post and it comes from Mozilla themselves.

After the technical issues were resolved in live wire, someone recently reported running Windows 8, Firefox, and Jaws 16.

• Windows 8, to my knowledge is not getting any updates
• Firefox may be old, and unable to understand the TLS infrastructure
• Jaws 16 isn’t supported with bug fixes
• Chrome can’t run on 8

In the next podcast, I talk about Live Wire a little bit, what it is, the basics on the LTN (Livewire Telephone Network) and that while I did have an issue, it was my own doing.

The person behind Live Wire understands the security well, and I believe more sites will be moving toward this aspect. I said this before reading this article, and this is Sans News Bites from February 11, 2020. If I had the chance to read this before that discussion, I’d be more up to date!

Browsers negotiate to the highest common denominator which can mask the presence of less secure connection options. Make sure you’re regularly scanning the encryption settings on your web servers to ensure older, less secure connections are disabled, or monitored and documented where enabled. Monitoring may show the need to support older less secure operating systems and browsers may not be as significant as thought, or worth the risk.

Livewire is the first site to my knowledge to have taken this step, and I believe we’ll have more.

There are other articles around the web that covers this, and I’m running 73 of firefox now and have no trouble with connecting to Livewire since my own technical issue was resolved.