<i>In addition, many less than 5-year-old Android phones (pre-Gingerbread) don&#x27;t support SHA-2.</i><p>TLS 1.2 (RFC 5246) added support for SHA-2 in August 2008.<p>Android Froyo was apparently released in May 2010 without support for TLS 1.2 or SHA-2.<p>Why the delay?<p>Edit:<p>Just found this:<p>&gt; Android has the technical capability of handling SHA-256 certificates right from version 1.0. In practice, some users may encounter issues with validating certificates that use cross certificates (these help chain certificates to alternate roots). 1.6 improved this issue for some users, with the issue being resolved as of version 2.2.<p><a href="https:&#x2F;&#x2F;support.globalsign.com&#x2F;customer&#x2F;portal&#x2F;articles&#x2F;1499561-sha-256-compatibility" rel="nofollow">https:&#x2F;&#x2F;support.globalsign.com&#x2F;customer&#x2F;portal&#x2F;articles&#x2F;1499...</a><p>which helps explain the situation with SHA-2, but not the delay in implementing TLS 1.2.