Discontinue support for weak cryptographic standards
Feb 27, 2017Patrick Toomey

Summary
This post announces the deprecation and eventual disablement of TLSv1/TLSv1.1 for HTTPS connections and diffie-hellman-group1-sha1/diffie-hellman-group14-sha1 for SSH connections. It provides technical details on the vulnerabilities of these older standards (POODLE, Logjam) and the rationale for upgrading to TLS 1.2 and diffie-hellman-group-exchange-sha256. The post outlines a timeline for disablement (February 1, 2018) and the steps being taken to minimize user impact, including internal updates to SSH implementations and communication to affected users.