Skip to content

Commit 4a8a952

Browse files
Merge pull request #311053 from Harikrishnan-M-B/patch-61
Revise TLS version and cipher suite support details
2 parents 55d3d2d + 3abd0b0 commit 4a8a952

1 file changed

Lines changed: 4 additions & 3 deletions

File tree

articles/frontdoor/end-to-end-tls.md

Lines changed: 4 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -33,7 +33,7 @@ Azure Front Door offloads the TLS sessions at the edge and decrypts client reque
3333
Azure Front Door supports two versions of the TLS protocol: TLS versions 1.2 and 1.3. All Azure Front Door profiles created after September 2019 use TLS 1.2 as the default minimum with TLS 1.3 enabled. Currently, Azure Front Door doesn't support client/mutual authentication (mTLS).
3434

3535
> [!IMPORTANT]
36-
> As of March 1, 2025, TLS 1.0 and 1.1 aren't allowed on new Azure Front Door profiles.
36+
> TLS 1.0 and 1.1 aren't supported.
3737
3838
For Azure Front Door Standard and Premium, you can configure predefined TLS policy or choose the TLS cipher suite based on your organization's security needs. For more information, see [Azure Front Door TLS policy](/azure/frontdoor/standard-premium/tls-policy) and [configure TLS policy on a Front Door custom domain](/azure/frontdoor/standard-premium/tls-policy-configure).
3939

@@ -128,12 +128,13 @@ For TLS 1.2/1.3, the following cipher suites are supported:
128128
- TLS_DHE_RSA_WITH_AES_128_GCM_SHA256
129129

130130
> [!NOTE]
131-
> Old TLS versions and weak ciphers are no longer supported.
131+
> Older TLS versions and weak ciphers are no longer supported.
132+
> Support for DHE cipher suites will end on April 1, 2026. See [documentation](diffie-hellman-ciphers.md) for more details.
132133
133134
Use *TLS policy* to configure specific cipher suites. Azure Front Door Standard and Premium offer two mechanisms for controlling TLS policy: you can use either a predefined policy or a custom policy per your own needs. For more information, see [Configure TLS policy on a Front Door custom domain](standard-premium/tls-policy-configure.md).
134135

135136
> [!NOTE]
136-
> For Windows 10 and later versions, we recommend enabling one or both of the ECDHE_GCM cipher suites for better security. Windows 8.1, 8, and 7 aren't compatible with these ECDHE_GCM cipher suites. The ECDHE_CBC and DHE cipher suites have been provided for compatibility with those operating systems.
137+
> For Windows 10 and later versions, we recommend enabling one or both of the ECDHE_GCM cipher suites for better security. Windows 8.1, 8, and 7 aren't compatible with these ECDHE_GCM cipher suites. The ECDHE_CBC cipher suites have been provided for compatibility with those operating systems.
137138
138139
## Related content
139140

0 commit comments

Comments
 (0)