TLS Edge compatibility

The TLS protocol is used to provide privacy and data integrity between two or more communicating computer applications. When secured by TLS, connections between a client and a server have one or more of the following properties:-

1. The connection is private
2. The identity of parties can be authenticated
3. The connection is reliable

Transportation layer came from Secure Socket Layer. A careful configuration of TLS will provide additional privacy-related properties like forwarding secrecy, prevent discloser of encryption keys etc.

Some of the TLS certificates do not support old Edge versions.

Impact

The impact include:-

• Renegotiation attack
• Downgrade attacks like Logjam and FREAK
• Cross-platform attacks like DROWN
• BEAST attack
• Breach attacks
• POODLE attacks

Mitigation / Precautions

This vulnerability can be fixed by:-

• Changing the TLS cipher for the user depending on the version of Edge.

Written by

Nash N Sulthan

Cyber Security Lead Engineer

Nash is a seasoned Security Engineer who brings a multifaceted approach to safeguarding digital environments. Not only does he excel in implementing robust security measures, but he's also deeply involved in the research and development process, constantly innovating to stay ahead of cyber threats. Nash's commitment to security extends beyond the conventional, making him a valuable contributor to the evolving landscape of digital defense.