Skip to content

Commit 119cbe4

Browse files
Merge pull request #312723 from yutanglin16/patch-27
Update guidance to use TLS 1.2+ and remove backward compatibility inf…
2 parents 9fcebb5 + 2fb54ae commit 119cbe4

1 file changed

Lines changed: 2 additions & 7 deletions

File tree

articles/app-service/overview-tls.md

Lines changed: 2 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -40,7 +40,7 @@ App Service supports the following TLS versions for incoming requests to your we
4040

4141
- **TLS 1.3**. The latest and most secure version, now fully supported.
4242
- **TLS 1.2**. The default minimum TLS version for new web apps.
43-
- **TLS 1.1 and TLS 1.0**. Versions supported for backward compatibility but not recommended.
43+
- **TLS 1.1 and TLS 1.0**. These are legacy protocols and are no longer considered secure.
4444

4545
You can configure the *minimum TLS version* for incoming requests to your web app and its Source Control Manager (SCM) site. By default, the minimum is set to **TLS 1.2**.
4646

@@ -71,12 +71,7 @@ App Service uses a secure set of TLS 1.2 cipher suites to help ensure encrypted
7171

7272
### TLS 1.1 and TLS 1.0
7373

74-
TLS 1.1 and TLS 1.0 are legacy protocols and are no longer considered secure. These versions are supported on App Service only for backward compatibility and should be avoided when possible. The default minimum TLS version for new apps is TLS 1.2, and we recommend that you migrate apps that use TLS 1.1 or TLS 1.0.
75-
76-
> [!IMPORTANT]
77-
> Incoming requests to web apps and incoming requests to Azure are handled differently. App Service continues to support TLS 1.1 and TLS 1.0 for incoming requests to web apps.
78-
>
79-
> For incoming requests made directly to the Azure control plane, for example, through Azure Resource Manager or API calls, we don't recommend that you use TLS 1.1 or TLS 1.0.
74+
TLS 1.1 and TLS 1.0 are legacy protocols and are no longer considered secure. The default minimum TLS version for new apps is TLS 1.2, and we recommend that you migrate apps that use TLS 1.1 or TLS 1.0 to using TLS 1.2 or higher.
8075

8176
## Minimum TLS cipher suite
8277

0 commit comments

Comments
 (0)