Hacker News Reader

TLS 1.0 won’t be deprecated in two months’ time, it’s being removed in two months’ time (from at least Firefox, Chrome and Safari; for IE and Edge Microsoft have just said the first half of the year). It’s already deprecated, has been for yonks.

View on HN

You're quite right, and this site is being migrated this week. I was going to do it this morning, but there was a traffic spike for some reason? :)

All done, thanks again for looking out!

That's for web browsers though, which get to be early movers. In terms of the standards organisations the IETF's Best Common Practice update to deprecate TLS 1.0 (and TLS 1.1 which wasn't widely deployed before TLS 1.2 anyway) is still working its way through the bureaucracy. Currently:

https://tools.ietf.org/html/draft-ietf-tls-oldversions-depre...

Although I liked its original name (oldversions-die-die-die) obviously that's one of many things that couldn't survive in a publicly endorsed document.

Reply on news.ycombinator.com