有哪些浏览器支持哪种TLS密码套件的列表? [英] Is there a list of which browser supports which TLS cipher suite?

问题描述

我正在尝试通过使用更高版本的TLS来提高应用程序的安全性.但是，我不想排除太多用户.是否有人知道是否有列出所有主要浏览器的列表，以及哪些版本支持TLS的哪些密码套件?例如

I'm trying to increase the security of my application by having a higher version of TLS. However, I do not want to exclude too many users. Does anyone know if there is a list which lists all main browsers, and which versions supported which cipher suites for TLS? e.g

Chrome version Y supports TLS_RSA ...., TLS_ECDHE...., ...
Chrome version Y+1 supports....
Safari version X ...
IE version Z ....
Microsoft Edge ...
Opera .... 
Firefox ...

我一直在寻找自己的后盾，但似乎找不到任何地方.有人看过这样的网站吗?谢谢一百万！

I've been googling my behind off and I cant seem to find it anywhere. Anyone seen a website like this? Thanks a million!

推荐答案

我不知道您是否可以找到此信息.

I don't know if there is somewhere you can find this information.

我看到两种确保与大多数浏览器兼容的方法:

I see 2 ways to ensure compatibility with most browsers:

• 在每次对配置进行更改后，使用 Qualys SSLLabs 检查握手，
• 继续使用TLSv1.0是需要对Android v4.3和更早版本的支持，并且至少支持在相应的TLS RFC中定义的密码套件.

要符合RFC的强制密码套件为:

The mandatory cipher suites to be compliant to the RFCs are:

• 用于TLSv1.1的TLS_RSA_WITH_3DES_EDE_CBC_SHA(也可以用于TLSv1.0)
• 用于TLSv1.2的TLS_RSA_WITH_AES_128_CBC_SHA

如果使用这些设置，则将支持所有浏览器，但Windows XP上的IE6除外.

If you use these settings, you will support all browsers, except IE6 on Windows XP.

然后，一旦支持这些协议和密码套件，就可以添加并选择更强的协议和密码套件:

Then once you support these protocols and cipher suites, you can add and prefer stronger ones:

• TLS_(EC)DHE_RSA_WITH_AES_256_GCM_SHA384(尚未广泛支持)
• TLS_(EC)DHE_RSA_WITH_AES_128_GCM_SHA256
• TLS_(EC)DHE_RSA_WITH_AES_256_CBC_SHA
• TLS_(EC)DHE_RSA_WITH_AES_128_CBC_SHA

使用这些设置，您应该支持几乎所有浏览器，并具有与现代浏览器相同的安全级别.

With these settings, you should support almost all browsers and have a good security level with the modern ones.

如果您想了解特定的浏览器版本，请安装该版本并转到此网站(仍然是Qualys SSLLabs，但适用于客户端).

If you want to know for a specific browser version, install it and go to this website (Still Qualys SSLLabs, but for client).

这篇关于有哪些浏览器支持哪种TLS密码套件的列表?的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！