/webmasters/community?hl=en
This content is likely not relevant anymore. Try searching or browse recent questions.
Message type [WNC-20107535] - Chrome browsers will start warning about TLS 1.0/1.1 0 Recommended Answers 9 Replies 4 Upvotes
1 Update
$0 Updates
1 Recommended Answer
$0 Recommended Answers
1 Relevant Answer
$0 Relevant Answers
0
Is this email sent to every domain in Google Search Console, without actually checking if TLSv1.2 or higher is already supported? Because I am very sure that my domain(s) already support TLSv1.2 (and some even TLSv1.3) besides their (legacy) TLSv1.0 and TLSv1.1 support. This email is very confusing.

"Starting January 2020, Chrome (version 79) will show a "NOT SECURE" warning for all sites that don’t support TLS 1.2 or higher. In March 2020, Chrome (version 81) will show a full page warning message for these sites. Enable TLS 1.2 or higher on your site to help protect users' data and avoid triggering the new warning.

To fix this problem

Enable TLS 1.2 on your site

To prevent warnings from appearing when Chrome users visit your site, serve your site over a modern version of TLS (TLS 1.2 or higher). Depending on your server software (such as Apache or nginx), this may be a configuration change or a software update. These changes do not require getting a new certificate.

Details
Relevant Answer Relevant Answers (0)
All Replies (9)
Relevant Answer
Hi Daniel,
 
I've not seen this message yet, don't know if that's because they are still rolling it out, or they do seem to think there is an issue with a property in your console.
 
Did the message reference any domain specifically?
marked this as an answer
Relevant Answer
Hi dwsmart,

Yes, it was about www.sammobile.com. SSL Labs shows that we still support v1.0 v1.1 but also v1.2 and v1.3 fine.
marked this as an answer
Relevant Answer
I've got the same issue being reported for www.americamagazine.org — and I've verified that both that our site supports TLS v1.2 and that Chrome actually negotiates a TLS v1.2 connection.

Would appreciate some clarification from Google about why I'm seeing this warning.
marked this as an answer
Relevant Answer
Hi Daniel,
 
When did you make the change, traditionally these kind of reports have worked from historical data, so that could explain it.
 
Naturally, it's still worth removing support for tls 1 & 1.1 as keeping it still leaves that attack vector open, 1.2 has very widescale support: https://caniuse.com/#feat=tls1-2
marked this as an answer
Relevant Answer
It has always supported 1.0, 1.1 and 1.2. No changes done.
marked this as an answer
Relevant Answer
yeah, us too. We're definitely NOT supporting 1.0 or 1.1 whereas 1.2 is definitely supported.

We would love to know how Google found this, and why they think 1.0/1.1 are enabled. Minor concern that we're missing something....
marked this as an answer
Relevant Answer
Hi All, 
 
Looks like you got caught with a false positive, as long as you are sure you support 1.2+, see https://twitter.com/googlewmc/status/1218176933722279936
 
Although Sam Sawyer, SJ, one of my more eagle eyed fellow product experts noticed you have issues with the IPv6 setup on your site, check out https://www.ssllabs.com/ssltest/analyze.html?d=www.americamagazine.org&hideResults=on&latest and have a quick chat with your hosts if needs be. Not related to this message, but could cause issues down the road.
marked this as an answer
Relevant Answer
@dwsmart — thanks for the heads-up. Could you specify the IPv6 set up issue (or email sawyer -@- americamedia -dot- org if you'd prefer)? I looked at the SSL labs reports and I see similar results between IPv4 and IPv6.
marked this as an answer
Relevant Answer
Hi Sam
 
Looks to be mostly solved now. Earlier they were serving a cert which didn't cover your domain.
 
You still have a vulnerability on one 
 
 
So getting an F (this is the issue: https://nvd.nist.gov/vuln/detail/CVE-2019-1559)
marked this as an answer
This question is locked and replying has been disabled.
Discard post? You will lose what you have written so far.
Write a reply
10 characters required
Failed to attach file, click here to try again.
Discard post?
You will lose what you have written so far.
Personal information found

We found the following personal information in your message:

This information will be visible to anyone who visits or subscribes to notifications for this post. Are you sure you want to continue?

A problem occurred. Please try again.
Create Reply
Edit Reply
Delete post?
This will remove the reply from the Answers section.
Notifications are off
Your notifications are currently off and you won't receive subscription updates. To turn them on, go to Notifications preferences on your Profile page.
Report abuse
Google takes abuse of its services very seriously. We're committed to dealing with such abuse according to the laws in your country of residence. When you submit a report, we'll investigate it and take the appropriate action. We'll get back to you only if we require additional details or have more information to share.

Go to the Legal Help page to request content changes for legal reasons.

Reported post for abuse
Unable to send report.
Report post
What type of post are you reporting?
Google takes abuse of its services very seriously. We're committed to dealing with such abuse according to the laws in your country of residence. When you submit a report, we'll investigate it and take the appropriate action. We'll get back to you only if we require additional details or have more information to share.

Go to the Legal Help page to request content changes for legal reasons.

Reported post for abuse
Unable to send report.
This reply is no longer available.
/webmasters/threads
//accounts.google.com/ServiceLogin
You'll receive email notifications for new posts at
Unable to delete question.
Unable to update vote.
Unable to update subscription.
You have been unsubscribed
Deleted
Unable to delete reply.
Removed from Answers
Removed from Updates
Marked as Recommended Answer
Marked as Update
Removed recommendation
Undo
Unable to update reply.
Unable to update vote.
Thank you. Your response was recorded.
Unable to undo vote.
Thank you. This reply will now display in the answers section.
Link copied
Locked
Unlocked
Unable to lock
Unable to unlock
Pinned
Unpinned
Unable to pin
Unable to unpin
Marked
Unmarked
Unable to mark
Reported as off topic
Known Issue
Fixed
Marked Fixed
Unmarked Fixed
Unable to mark fixed
Unable to unmark fixed
/webmasters/profile/0