Re: TLS v1.2 -only- deployments
| From: | Niklas Keller | Date: | Sun, 14 May 2017 07:46:52 +0000 |
| Subject: | Re: TLS v1.2 -only- deployments | ||
| References: | 1 2 3 | Groups: | php.internals |
| Request: | Send a blank email to internals+get-99030@lists.php.net to get a copy of this message | ||
>
> For NDA reasons, I can't tell you which servers or vendors are involved.
> All I know is that I saw a bunch of systems across disparate vendors in a
> very short amount of time switching to TLS 1.2 only, which left me confused
> and wondering what in the world was going on. Only after someone in a
> completely unrelated context forwarded me a message they received from
> Authorize.net did I make a PCI DSS connection - all of the systems that
> changed are involved with PCI compliance and auditing to various degrees.
> Authorize.net recently publicly announced that they are migrating to TLS
> 1.2 only and have already switched their sandbox environment over:
>
> https://community.developer.authorize.net/t5/News-and-Announ
> cements/Experiencing-Sandbox-Connection-Issues-TLS-1-2-Is-
> Now-Required/td-p/57948
Yes, PayPal also announced these plans quite a while back.
https://www.paypal.com/au/webapps/mpp/tls-http-upgrade
I'll try to find the PHP 5.6 discussion later today.
Regards, Niklas