Forum Discussion
TheAutisticTechie
Apr 08, 2019Brass Contributor
TLS 1.3
TLS 1.3 is a very needed feature for those in corporate environments for our public facing websites. The speed advantages are immense in larger sites with no caching
- Apr 09, 2019
TheAutisticTechie As with Chrome, TLS/1.3 is supported in all versions of Chromium-based Edge (and will be supported on all platforms).
Anonymous
Jul 12, 2019Eric_Lawrence Can we had a way (in entreprise) like they do in firefox to reject tls 1.0 and 1.1 and other weak cipher suite ?
Eric_Lawrence
Microsoft
Jul 12, 2019The SSLVersionMin policy allows enterprises to set a minimum TLS version.
Ciphersuites can be controlled via the cipher-suite-denylist command line argument (Chrome uses "cipher-suite-blacklist") as follows:
msedge.exe --ssl-version-min=tls1.2 --cipher-suite-denylist=0x000a https://ssllabs.com
This doesn't appear to be available via policy in Chromium today, see:
https://bugs.chromium.org/p/chromium/issues/detail?id=931204#c5
https://bugs.chromium.org/p/chromium/issues/detail?id=930508#c15
...but it's something that the Edge team might look at if there were significant demand.
Ciphersuites can be controlled via the cipher-suite-denylist command line argument (Chrome uses "cipher-suite-blacklist") as follows:
msedge.exe --ssl-version-min=tls1.2 --cipher-suite-denylist=0x000a https://ssllabs.com
This doesn't appear to be available via policy in Chromium today, see:
https://bugs.chromium.org/p/chromium/issues/detail?id=931204#c5
https://bugs.chromium.org/p/chromium/issues/detail?id=930508#c15
...but it's something that the Edge team might look at if there were significant demand.
- AnonymousJul 12, 2019
i was trying --cipher-suite-blacklist i doesn't know it was denylist now
edit: thanks