Support additional cipher suites, some hosts only supporting stronger ciphers

Question

I'm using Windows 7 Enterprise and over the past year I've been shut out of some websites when I use Schannel. The problem is Windows 7 does not support some ciphers such as TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 and recent changes to some websites are limiting their available ciphers to stronger ones not supported by Windows 7. For example now CNBC.

Microsoft has in the past updated cipher suites for legacy clients and I urge them to do the same for Windows 7. As websites block older ciphers they may become inaccessible via Schannel in Windows 7.

Answer 1

HI
Unfortunately, Windows 7 support ended on January 14, 2020,i am not sure if there will be updated cipher suites for legacy clients in future.if you are urgent for your issue ,do you mind upgrading to win10 ?
if you have used win10 and still wait win7 have the same security related update .we can monitor below win7 update history link.

October 13, 2020—KB4580387 (Security-only update)
https://support.microsoft.com/en-us/help/4580387

TLS Cipher Suites in Windows 7
https://learn.microsoft.com/en-us/windows/win32/secauthn/tls-cipher-suites-in-windows-7

Windows 7 support ended on January 14, 2020
https://support.microsoft.com/en-us/help/4057281/windows-7-support-ended-on-january-14-2020