TLS 1.0,1.1, 1.2 and 1.3 do they affect browsing speed?

kelper · Sep 15, 2024

In the interests of higher security I used inetcpl.cpl to disable TLS 1.0, 1.1 and 1.2 and enable 1.3. But some sites or links did not work.
If all TLS versions are enabled, which version will my browser use? I think I will just disable 1.0and 1.1 for now.

pseymour · Sep 15, 2024

They use the highest version that both the client and server have in common. This negotiation is early in the initial handshake, during what is called the client hello and the server hello.

Edit: To expand a little, let's say you have TLS 1.2 and 1.3 enabled. The client connects to the server and says the highest version that it supports, 1.3. The server responds, "I can do 1.2." Client allows the downgrade, and all is well via 1.2. If you only have 1.3 on the client, and the server responds, "I can do 1.2," the client is required to respond with a protocol version mismatch and close the connection.

Ghot · Sep 15, 2024

TLS 1.0 and TLS 1.1 soon to be disabled in Windows | Microsoft Community Hub

While there will be an option to re-enable these protocols, we encourage the move to newer TLS versions.

techcommunity.microsoft.com

Solving the TLS 1.0 Problem

This document presents guidance on rapidly identifying and removing Transport Layer Security (TLS) protocol version 1.0 dependencies in software built on top of Microsoft operating systems. It is intended to be used as a starting point for building a migration plan to a TLS 1.2+ network environment.

learn.microsoft.com

kelper · Sep 15, 2024

These are the default.

Ghot · Sep 15, 2024

kelper said:
These are the default.

Mine looks like this. I haven't noticed any websites not working...

I honestly don't remember if I did this manually, or if a WU did it.
Maybe I followed directions in one of @Brink 's "news" items?
I don't see anything in my notes for Win 10 or Win 11.

neemobeer · Sep 15, 2024

TLS 1.0 and TLS 1.1 are considered insecure and web security best practices require web site operates disable them along with weaker cipher suites. Even Window 7 will support a subset of newer cipher suites and TLS 1.2

kelper · Sep 15, 2024

If you click on 'restore advanced settings' it will disable 1.3!

Ghot · Sep 15, 2024

kelper said:
If you click on 'restore advanced settings' it will disable 1.3!

Since I don't have anything in my notes about this... I'm NOT gonna click on that.
There are far too many settings in that un-resizable window, to click on... "Restore Advanced Settings".

If there was an Undo option... I would try it for you.

I don't know enough about networking, to mess with all those settings.

NOTE: If it makes a difference... I don't use or even have, a router.

kelper · Sep 15, 2024

Ghot said:
NOTE: If it makes a difference... I don't use or even have, a router.

So how do you connect to the internet?

kelper · Sep 15, 2024

How can I find which version of TLS is active when I am browsing a website?

I know about SSL/TLS Client Test - TLS Fingerprinting but this just tells you browser capabilities.

Ghot · Sep 15, 2024

kelper said:
So how do you connect to the internet?

I have Verizon FIOS (fiber to the premises)
Verizon uses an ONT (optical network terminal), which I assume acts like a modem.
I just ran CAT5e (exterior rated), from the ONT to my comp.

Side note...
For my Ethernet properties, I only have these two things check marked...

Again, I'm just trying to guess what may be helpful to you.
Last time I "worked" with networking was the early 80's.
I think 14K was the new, must have baud rate.

I don't know if this applies, but I found this in the tutorials...

Enable DNS over TLS (DoT) in Windows 11

This tutorial will show you how to change your DNS Server address and enable DNS over TLS (DoT) in Windows 11. A DNS (Domain Name System) server is the service that makes it possible for you to open a web browser, type a domain name and load your favorite websites. DNS over HTTPS (DoH) is a...

www.elevenforum.com

I don't use any special DNS server. Pretty sure I just use Verizon's.

pseymour · Sep 15, 2024

kelper said:
How can I find which version of TLS is active when I am browsing a website?

I know about SSL/TLS Client Test - TLS Fingerprinting but this just tells you browser capabilities.

In Firefox, just hit Ctrl-I and go to the Security tab. Technical Details at the bottom of the window.

kelper · Sep 15, 2024

So @Ghot is the computer the only thing with inteernet access in your home? No wifi?

kelper · Sep 15, 2024

pseymour said:
In Firefox, just hit Ctrl-I and go to the Security tab. Technical Details at the bottom of the window.

I don't use FF.

Ghot · Sep 15, 2024

kelper said:
So @Ghot is the computer the only thing with inteernet access in your home? No wifi?

Yep. No wifi.
For my smart phone I use cellular for everything (unlimited data plan)
No IoT stuff in my apartment. Don't even have a smart TV.
Toaster, microwave, fridge, thermostat... all dumb.

My TV, from around 2012... Amazon.com

Hey... I watched this X-Files episode. No IoT for me, pal!

Rm9sbG93ZXJz - Wikipedia

en.wikipedia.org

pseymour · Sep 15, 2024

kelper said:
I don't use FF.

Well you wanna tell us which browser, or should we just keep guessing?

kelper · Sep 15, 2024

Brave

pseymour · Sep 15, 2024

Hopefully someone has an easier method, but Chromium browsers make it kind of awkward to check. Right-click anywhere on the page, and click Inspect. In the pane that opens to the right, click the Security tab.

kelper · Sep 15, 2024

I tried but no TLS info appeared.

pseymour · Sep 15, 2024

I get this for elevenforum.com (L) and google.com (R).

TLS 1.0,1.1, 1.2 and 1.3 do they affect browsing speed?

Well-known member

My Computers

freshly showered

My Computers

Well-known member

My Computers

Well-known member

My Computers

Well-known member

My Computers

Well-known member

My Computer

Well-known member

My Computers

Well-known member

My Computers

Well-known member

My Computers

Well-known member

My Computers

Well-known member

My Computers

freshly showered

My Computers

Well-known member

My Computers

Well-known member

My Computers

Well-known member

My Computers

freshly showered

My Computers

Well-known member

My Computers

freshly showered

My Computers

Well-known member

My Computers

freshly showered

My Computers

Similar threads