CRITICAL SECURITY UPDATE - Disabling Support for HTTP, and End of Life for TLS 1.0 or TLS 1.1

Posted by | Mar 09, 2020

CRITICAL SECURITY UPDATE - Disabling Support for HTTP, and End of Life for TLS 1.0 and TLS 1.1

As of 1 July 2020 Autoaddress will no longer support API calls using older protocols HTTP, TLS 1.0 or TLS 1.1 encryption.

What is TLS?

Transport Layer Security (TLS) is a cryptographic protocol used to establish a secure communications channel between two systems. It is used to authenticate one or both systems, and protects the confidentiality and integrity of information that passes between systems. It was originally developed as Secure Sockets Layer (SSL) by Netscape in the early 1990s. Standardised by the Internet Engineering Taskforce (IETF), TLS has undergone several revisions to improve security to block known attacks and add support for new cryptographic algorithms, with major revisions to SSL 3.0 in 1996, TLS 1.0 in 1990, TLS 1.1 in 2006, and TLS 1.2 in 2008.

What is happening? – Autoaddress will no longer support API calls using HTTP, TLS 1.0 or TLS 1.1. 

In line with industry best practice we are discontinuing support and access to these out-of-date protocols.  The vast majority of encrypted Internet traffic is now over TLS V1.2.  Major providers like Google, Microsoft, Apple and Mozilla will no longer support HTTP, TLS 1.0 or TLS 1.1 as of March 2020. 

When is it happening?  - We have a hard deadline date of 1 July 2020.

The date of 1 July 2020 is to allow clients sufficient time to review and update their internal systems and endpoints to the latest communication protocol.  We have our Support Team available to assist any client with queries during this transition.  Should you require any assistance please contact us at support@autoaddress.ie

What does this mean for you?

If you are already using TLS 1.2 this will have no impact on you. 

If you are calling our API via HTTP, TLS 1.0 or TLS 1.1 you need to update all endpoints to TLS 1.2 before 1 July 2020. 

What will be the impact if you don’t upgrade

Any calls to our API using HTTP, TLS 1.0 or TLS 1.1 will fail after 1 July 2020 and you be blocked from access to API information and this may disrupt the service you provide to your customers.

Leave a comment

Categories

Contact

twitter@autoaddress


ISO27001

Find out how your organisation can benefit from Address Intelligence.