TLS 1.2 Requirement - Can We Still Have HTTP?

Tony Lugg 40 Reputation points
2023-11-23T23:06:19.6633333+00:00

I've received several notices about requiring anything accessing resources on Azure to be TLS 1.2. We have some third parties that still send data to our back-end services on http/80, will we still be able to do that after October 2024 when TLS < 1.2 will be prohibited?

Azure Virtual Machines
Azure Virtual Machines
An Azure service that is used to provision Windows and Linux virtual machines.
7,562 questions
0 comments No comments
{count} votes

Accepted answer
  1. Adam Zachary 2,886 Reputation points
    2023-11-24T06:50:18.8833333+00:00

    Hi Toney,

    Microsoft Azure will require all interactions with its services to be secured using Transport Layer Security (TLS) 1.2 or later starting from 31 October 2024. This change is to enhance security and provide best-in-class encryption for data. The move will end support for older TLS versions, namely TLS 1.0 and 1.1​​.

    Regarding the use of HTTP, the requirement for TLS 1.2 or later pertains to encrypted communications. HTTP, being an unencrypted protocol, does not inherently use TLS. Therefore, if your services currently communicate over HTTP (port 80) without encryption, they would not be directly affected by the TLS 1.2 enforcement.

    However, it's important to note that the general trend in web services and applications is towards enforcing secure communications, typically via HTTPS (HTTP over TLS/SSL). This shift is driven by the increasing need for data security and privacy. Therefore, while HTTP communications might still technically work, it is highly recommended to transition to HTTPS to ensure secure data transmission, especially when interacting with cloud services like Azure.

    For the most secure and compliant interaction with Azure services after October 2024, you should consider upgrading all communications to use HTTPS with TLS 1.2 or later. This applies not only to Azure services but is generally a best practice for all web-based communications.

    Kindly if you find the provided information helpful and it resolves your query, please consider accepting the answer. Your feedback is valuable and helps ensure the quality and relevance of the responses.


0 additional answers

Sort by: Most helpful