TLS and cipher suites update
we updated our supported TLS versions and cipher suites to strengthen encryption and protect customer websites.
What Changed
Section titled “What Changed”- All sites using SSL certificates (HTTPS) now support TLS 1.2 and TLS 1.3.
- Support for TLS 1.0 and TLS 1.1 has been removed due to known vulnerabilities.
- This change aligns with industry standards and PCI compliance requirements.
Impact on Users
Section titled “Impact on Users”- Most users will not notice any difference — modern browsers and devices already support TLS 1.2+.
- Legacy devices and browsers that only support TLS 1.0/1.1 will no longer connect to sites using SSL.
- Attempting PCI compliance with TLS 1.0/1.1 will fail, and browsers may display warnings.
Backward Compatibility
Section titled “Backward Compatibility”- While not recommended, administrators can configure servers for limited backward compatibility with TLS 1.2.
- ⚠️ Note: TLS 1.0 and 1.1 are severely compromised and should not be used.
✅ Best Practices
Section titled “✅ Best Practices”- Ensure your applications and integrations support TLS 1.2 or higher.
- Test your site with modern browsers to confirm compatibility.
- Avoid enabling deprecated protocols, as they weaken security and may cause compliance failures.