Jump to content

HTTPS/Browser Recommendations

From Wikitech

Wikimedia encourages its readers to use modern web browsers which support secure internet connections. Below are recommendations for how to update to a modern web browser.

Many older computers, mobile devices or web browsers only support outdated cryptographic methods that are becoming insecure in the face of modern attacks. Wikimedia will no longer support these outdated cryptographic methods to ensure security against eavesdropping and interference (man-in-the-middle attacks or downgrade attacks). Many other sites on the Internet also require (or will soon require) a strong minimum levels of cryptographic abilities from your computer or mobile device. Keeping up-to-date with security updates from web browsers and operating systems will be essential for staying secure and continuing full access to all websites on the Internet.

Advice

For all users

  • Please make sure you have applied the latest security updates to your operating system and have updated your web browser. Remember that for most browsers and devices, they will only be updated after you fully close them and restart them.
  • Disable or uninstall any 3rd party "anti-virus" software. Most of them do more harm than good when they interfere with your browser's secure connections.[1][2]

For users of Microsoft Windows

Windows XP
Windows Vista
  • If you must use Windows Vista, install and use Firefox 52 ESR instead of Internet Explorer to access our sites.
    • Note that while this release is the latest available to Windows Vista it is not maintained and will contain security bugs.
  • You should upgrade to Windows 10 or Windows 11. Windows Vista has very serious security flaws.[n 3]
Windows 7
  • If you must use Windows 7, install and use Firefox 115 ESR instead of Chrome, Internet Explorer or Edge.
    • Note that Firefox 115 ESR is the last version that supports Windows 7 and 8.1. It will receive security updates until at least August 2025.[4]
  • You should upgrade to Windows 10 or Windows 11.[n 4]
Windows 8.1
  • If you must use Windows 8.1, install and use Firefox 115 ESR instead of Chrome, Internet Explorer or Edge.
    • Note that Firefox 115 ESR is the last version that supports Windows 7 and 8.1. It will receive security updates until at least August 2025.[4]
  • You should upgrade to Windows 10 or Windows 11.[n 5]
Windows 10
  • You should upgrade the Microsoft Edge browser or switch to a different browser such as Firefox, Chrome, or Opera.
  • Please also ensure you stay up-to-date with security updates from Windows Update, and ensure you regularly upgrade your browser if applicable.
  • Note Note: Microsoft will end extended support for Windows 10 in October 2025. You should upgrade to Windows 11 by then to continue receiving security updates.
Windows 11
  • You should upgrade the Microsoft Edge browser or switch to a different browser such as Firefox, Chrome, or Opera.
  • Please also ensure you stay up-to-date with security updates from Windows Update, and ensure you regularly upgrade your browser if applicable.

For users of Apple macOS

Mac OS X 10.6 Snow Leopard, 10.7 Lion, 10.8 Mountain Lion
  • If you must use Mac OS X 10.6–10.8, install and use Chrome 49 instead of Firefox or Safari.
    • Note that while this release is the latest available to Mac OS X 10.6–10.8 it is not maintained and will contain security bugs.
  • You should upgrade to macOS 13 Ventura or later. That version and later ones still support security updates.
OS X 10.9 Mavericks or 10.10 Yosemite
  • If you must use OS X 10.9–10.10, install and use Firefox 78 ESR instead of Chrome or Safari.
    • Note that while this release is the latest available to OS X 10.9 and 10.10 it is not maintained and will contain security bugs.
  • You should upgrade to macOS 13 Ventura or later. That version and later ones still support security updates.
OS X 10.11 El Capitan
  • If you must use OS X 10.11, install and use Chrome 103 instead of Firefox or Safari.
    • Note that while this release is the latest available to OS X 10.11 it is not maintained and will contain security bugs.
  • You should upgrade to macOS 13 Ventura or later. That version and later ones still support security updates.
macOS 10.12 Sierra, 10.13 High Sierra, 10.14 Mojave
  • If you must use macOS 10.12–10.14, install and use Firefox 115 ESR instead of Chrome, Safari or Edge.
    • Note that Firefox 115 ESR is the last version that supports macOS 10.12–10.14. It will receive security updates until at least August 2025.[5]
  • You should upgrade to macOS 13 Ventura or later. That version and later ones still support security updates.
macOS 10.15 Catalina
  • If you must use macOS 10.15, install and use Firefox instead of Chrome, Safari or Edge.
  • As of May 2025, the only major browser still supporting macOS 10.15 is Firefox.
  • You should upgrade to macOS 13 Ventura or later. That version and later ones still support security updates.
macOS 11 Big Sur or 12 Monterey
  • If you must use macOS 11 or 12, switch to a different supported browser such as Chrome, Firefox or Edge instead of using Safari.
  • Safari only supports the current and previous 2 versions of macOS.
  • You should upgrade to macOS 13 Ventura or later. That version and later ones still support security updates.
macOS 13 Ventura, 14 Sonoma, 15 Sequoia
  • You should upgrade the Safari browser or switch to a different browser such as Firefox, Chrome, or Edge.
  • Please also ensure you stay up-to-date with security updates from Software Update, and ensure you regularly upgrade your browser if applicable.

For users of Apple iPhone, iPad, and iPod

Upgrade to iOS version 10 (or higher) if supported on your device. If your device is too old for iOS 10, consider a device upgrade. Check to ensure you have the latest version of whatever browser you may use in the App Store.

For users of Android devices

Android 4.0 Ice Cream Sandwich
  • If you must use Android 4.0, install and use Firefox 55 instead of Chrome or default stock browser app.
    • Note that while this release is the latest available to Android 4.0 it is not maintained and will contain security bugs.
  • You should upgrade to Android 13 or later. That version and later ones still support security updates.
Android 4.1–4.3 Jellybean
  • If you must use Android 4.1–4.3, install and use Firefox 68 ESR or Chrome 71 instead of default stock browser app.
    • Note that while this release is the latest available to Android 4.1–4.3 it is not maintained and will contain security bugs.
  • You should upgrade to Android 13 or later. That version and later ones still support security updates.
Android 4.4 KitKat
  • If you must use Android 4.4, install and use Firefox 68 ESR or Chrome 81 instead of default stock browser app.
    • Note that while this release is the latest available to Android 4.4 it is not maintained and will contain security bugs.
  • You should upgrade to Android 13 or later. That version and later ones still support security updates.
Android 5.x Lollipop, 6.0 Marshmallow, 7.x Nougat
  • If you must use Android 5.0–7.1, install and use Firefox from Play Store instead of Chrome or default stock browser app.
    • Note that Firefox is the only major browser still supporting Android 5.0 and later.
  • You should upgrade to Android 13 or later. That version and later ones still support security updates.
Android 8.x Oreo, 9 Pie, 10, 11, 12
  • You should update the Chrome browser via Play Store or switch to a different browser, such as Firefox.
  • You should upgrade to Android 13 or later. That version and later ones still support security updates.
Android 13, 14, 15
  • You should update the Chrome browser via Play Store or switch to a different browser, such as Firefox.
  • You should check and install any security updates by going to Settings → System → Software update (varies by device).

For IT personnel that manage outbound Proxy appliances

Please ensure you are running the latest stable software release from your vendor, and that you keep up with this regularly. Please also consult your vendor and/or their documentation as to how you may need to configure your outbound proxy to support stronger encryption/ciphers. See HTTPS for technical requirements.

Logs for Wikipedia have indicated that there are many requests from corporate desktop browsers that meet the version requirements of operating system, web browser, and device - but still suffer from downgraded cipher choice when communicating over the Internet due to outdated or poorly configured outbound proxies.

You may use an online tester to check which ciphers are supported by the browser you are currently using, such as the one provided by Qualys (SSL Labs).

Notes

  1. Our sites no longer allow pageviews from IE-on-XP at all.
  2. Microsoft ended all technical support for this system version in 2014.[3] Microsoft provides no more security updates for the many flaws which have been discovered in Windows XP and its version of Internet Explorer after 2014. More-detailed technical information about removal of IE-on-XP support from our projects by 2017-10-17 is available at HTTPS/3DES Deprecation
  3. Microsoft no longer supports Vista, and does not provide security updates since April 2017.
  4. Microsoft no longer supports Windows 7 (including Internet Explorer on Win7), and does not provide security updates since January 2020, except paid extended security updates (ESU), which ended in January 2023.
  5. Microsoft no longer supports Windows 8.1 (including Internet Explorer on Win8.1), and does not provide security updates since January 2023.

References

See also