TLS 1.3 on Azure

Tarun Sood 11

Dear Team

Please confirm when TLS 1.3 be available on azure app services , Azure SQL (MI as well) and other networking services ( gateway,
application load balancer etc

Thanks

Oury Ba-MSFT 16,636 Reputation points Microsoft Employee

2022-02-17T21:05:24.73+00:00

Hi @Tarun Sood Thank you for posting your Question on Microsoft Q&A and for using Azure services.

For Azure SQL Managed Instance, that would be after SQL Server introduces.
For App services, it is in the road map but there isn't a precise data when this will be available.

Regards,
Oury
Peter Bertok 61 Reputation points

2022-02-18T03:07:28.937+00:00

One glaring issue is that the Application Gateway team hasn't touched the TLS settings in 5 years and is degrading security for Azure customers -- with their security-focused product!

The out-of-the-box default rates a "B" on the www.ssllabs.com tests, and leaves TLS v1.0 enabled, which Microsoft themselves no longer do for any of their major services, including Azure itself.

For reference, Windows Server 2022 has been GA for over 6 months and has TLS v1.3 support.

Similarly, HTTP/3 support is nowhere to be seen, despite it being supported by Windows Server.

Saying TLS v1.3 is "on the roadmap" is not a good enough answer. There should be an actual plan with a deadline that can be stated here. Please go back to the relevant teams working on Azure's security products and ask them when they plan on catching up with other security vendors. Right now, they're all very far behind and appear to have no publicly-stated plans to change that situation.
Howell Yang 40 Reputation points

2023-07-24T19:17:55.9066667+00:00

Is TLSv1.3 currently supported for Azure Active Directory? If so, can you point me to the documentation?

Thanks,

Howell
Oury Ba-MSFT 16,636 Reputation points Microsoft Employee

2023-07-25T19:24:57.41+00:00

Howell Yang

TLSv1.3 is currently not supported for Azure Active Directory. Here is the documentation that outlines what is new in Azure Active directory. What's new in Azure Active Directory?

Regards,

Oury
Stewart, Jack 0 Reputation points

2023-09-08T19:06:45.0133333+00:00

What about everything that is not Azure Application Gateway? TLS 1.2 is getting close to the edge of being depreciated (it has been in service 15 years). https://www.vertexcybersecurity.com.au/tls1-2-end-of-life/#:~:text=It%20appears%20the%20maximum%20number,version%20is%20vulnerabilities%20and%20TLS1.

1 answer

Jay S 11 Reputation points Microsoft Employee

2022-07-26T17:17:18.487+00:00

@Peter Bertok @Tarun Sood Application Gateway now supports TLS1.3. You can use the new Predefined or CustomV2 SSL policies for this purpose. https://learn.microsoft.com/en-us/azure/application-gateway/application-gateway-ssl-policy-overview

Thanks,
Jay
Please sign in to rate this answer.
Mariusz Makowski 0 Reputation points

2023-01-11T19:16:11.0466667+00:00

what about API Management service?
Sign in to comment