TLS encryption v1.2 now the only encryption in Office 365

TLS encryption v1.2 now the only encryption in Office 365

To provide best-in-class encryption to customers, Microsoft plans to discontinue support for Transport Layer Security (TLS) versions 1.0 and 1.1 in Office 365 from October 31st 2018.

Now although these TLS versions have no known security issues, due to the potential for future attacks and other TLS vulnerabilities, they have made the decision to stop supporting TLS 1.0 and 1.1 in Microsoft Office 365.

What is TLS?

TLS is the successor to the Secure Sockets Layer protocol (SSL) and provides secure communication on the internet for e-mail and data transfer.

TLS encryption email office 365

What does this security update mean?

It means that Microsoft will not fix new issues that are found in clients, devices or indeed local or cloud services that connect to Office 365 by using these older TLS versions.

What does it not mean in terms of Office 365 use?

Office 365 will not block the older TLS 1.0 and 1.1 connections and there is no official date for removing TLS 1.0 and 1.1 in the Office 365 connections settings.

Recommended actions

Microsoft have stated that everyone should make sure that all client-server and browser-server connections use TLS 1.2 (or a later version) to ensure connection to the Office 365 service.

For a more in-depth look into the security update, please visit https://support.microsoft.com/en-us/help/4057306/preparing-for-tls-1-2-in-office-365

The following two tabs change content below.
David has held positions as Operations Director and Head of IT in legal and professional firms for more than 10 years. He is a Director and co-owner of Amazing Support, an Award Winning, Microsoft Silver & Cyber Essentials accredited specialist Managed IT Support and Cyber Security company. David actively helps SME businesses receive better Managed IT Support and Cyber Security Services in the London and Hertfordshire areas. He also assists overseas companies who are looking to expand their business operations into the UK and helps with their inward investment IT process. A member of The Chartered Institute for IT (BCS), UK Council for Child Internet Safety (UKCCIS) and an event speaker promoting business start-ups and technology awareness. David is also an Accredited Mediator. Married with a son, David enjoys driving his hybrid around Hertfordshire, participating in charity bike rides and is a keen Krav Maga practioner.