Microsoft will begin blocking legacy TLS connections in Exchange Online soon

This post was originally published on Neowin

Outlook is heavily used in both enterprise and personal environments so it’s crucial that Microsoft keeps it updated according to current security and technology standards. We already know that the Redmond tech firm is modernizing some aspects of Outlook through the power of Copilot, the company has now announced some ways it is getting rid of legacy infrastructure too.

Microsoft has revealed that it is deprecating legacy versions of TLS, particularly TLS 1.0 and TLS 1.1 for POP3 and IMAP4 connections in Exchange Online. For those unaware, Outlook in most enterprise environments uses Exchange Online as the backend infrastructure, but some firms who prefer on-premises deployments tend to resort to Exchange Server.

Redmond says that it is making this decision to secure Exchange Online, since these legacy versions of the TLS protocol have been deprecated by most of the industry already. Most email and client libraries today use TLS 1.2 or higher, and the “vast majority” of Exchange Online traffic is routed through this technology too.

Microsoft will begin blocking these legacy connections starting from July 2026, so those who still utlize them will be directly impacted. As such, the company has

Read the rest of this post, which was originally published on Neowin.

Previous Post

Microsoft locking Outlook users out with “tried to sign in many times” email recovery bug