HTTPS/Browser Recommendations - Wikitech (original) (raw)

Wikimedia encourages its readers to use modern web browsers which support secure internet connections. Below are recommendations for how to update to a modern web browser.

Many older computers, mobile devices or web browsers only support outdated cryptographic methods that are becoming insecure in the face of modern attacks. Wikimedia will no longer support these outdated cryptographic methods to ensure security against eavesdropping and interference (man-in-the-middle attacks or downgrade attacks). Many other sites on the Internet also require (or will soon require) a strong minimum levels of cryptographic abilities from your computer or mobile device. Keeping up-to-date with security updates from web browsers and operating systems will be essential for staying secure and continuing full access to all websites on the Internet.

Advice

For all users

For users of Microsoft Windows

Windows XP

Windows Vista

Windows 7

Windows 8.1

Windows 10

Windows 11

For users of Apple macOS

Mac OS X 10.6 Snow Leopard, 10.7 Lion, 10.8 Mountain Lion

OS X 10.9 Mavericks or 10.10 Yosemite

OS X 10.11 El Capitan

macOS 10.12 Sierra, 10.13 High Sierra, 10.14 Mojave

macOS 10.15 Catalina

macOS 11 Big Sur or 12 Monterey

macOS 13 Ventura, 14 Sonoma, 15 Sequoia

For users of Apple iPhone, iPad, and iPod

Upgrade to iOS version 10 (or higher) if supported on your device. If your device is too old for iOS 10, consider a device upgrade. Check to ensure you have the latest version of whatever browser you may use in the App Store.

For users of Android devices

Android 4.0 Ice Cream Sandwich

Android 4.1–4.3 Jellybean

Android 4.4 KitKat

Android 5.x Lollipop, 6.0 Marshmallow, 7.x Nougat

Android 8.x Oreo, 9 Pie, 10, 11, 12

Android 13, 14, 15, 16

For IT personnel that manage outbound Proxy appliances

Please ensure you are running the latest stable software release from your vendor, and that you keep up with this regularly. Please also consult your vendor and/or their documentation as to how you may need to configure your outbound proxy to support stronger encryption/ciphers. See HTTPS for technical requirements.

Logs for Wikipedia have indicated that there are many requests from corporate desktop browsers that meet the version requirements of operating system, web browser, and device - but still suffer from downgraded cipher choice when communicating over the Internet due to outdated or poorly configured outbound proxies.

You may use an online tester to check which ciphers are supported by the browser you are currently using, such as the one provided by Qualys (SSL Labs).

Notes

  1. Our sites no longer allow pageviews from IE-on-XP at all.
  2. Microsoft ended all technical support for this system version in 2014.[3] Microsoft provides no more security updates for the many flaws which have been discovered in Windows XP and its version of Internet Explorer after 2014. More-detailed technical information about removal of IE-on-XP support from our projects by 2017-10-17 is available at HTTPS/3DES Deprecation
  3. Microsoft no longer supports Vista, and does not provide security updates since April 2017.
  4. Microsoft no longer supports Windows 7 (including Internet Explorer on Win7), and does not provide security updates since January 2020, except paid extended security updates (ESU), which ended in January 2023.
  5. Microsoft no longer supports Windows 8.1 (including Internet Explorer on Win8.1), and does not provide security updates since January 2023.
  6. Microsoft no longer supports Windows 10 and does not provide standard security updates since October 2025. Extended security updates are available for customers until October 2026; depending on your location, you have different options to enroll into them.

References

  1. http://robert.ocallahan.org/2017/01/disable-your-antivirus-software-except.html
  2. https://jhalderm.com/pub/papers/interception-ndss17.pdf
  3. https://support.microsoft.com/en-us/help/13853/windows-lifecycle-fact-sheet
  4. 4.0 4.1 Firefox users on Windows 7, 8 and 8.1 moving to Extended Support Release | Firefox Help
  5. https://learn.microsoft.com/en-in/deployedge/microsoft-edge-support-lifecycle#w
  6. Firefox users on macOS 10.12, 10.13 and 10.14 moving to Extended Support Release

See also