SECURITY ANNOUNCEMENT: Removing old TLS versions
TLS (and its predecessor SSL) are cryptographic protocols that provide authentication and data encryption for clients connecting with web servers. As new vulnerabilities are discovered, older cryptographic protocol versions are deprecated to maintain secure environments.
On Tuesday, January 21, 2020, Smarty will require clients to use TLSv1.2 or greater to connect with Smarty APIs without interruption. Clients using TLSv1.0 or TLSv1.1 will no longer be able to connect. Please refer to our documentation for more information: https://www.smarty.com/docs/cloud/requirements#ciphers
To see if your client software is able to properly connect, please use our test page: https://test-tls.api.smarty.com/
The industry in general is removing support for older TLS versions. Please refer to the following announcements from major browser vendors for more information:
- https://blog.mozilla.org/security/2018/10/15/removing-old-versions-of-tls/
- https://webkit.org/blog/8462/deprecation-of-legacy-tls-1-0-and-1-1-versions/
- https://blogs.windows.com/msedgedev/2018/10/15/modernizing-tls-edge-ie11/
- https://security.googleblog.com/2018/10/modernizing-transport-security.html