Deprecating TLS 1.0 and 1.1 support on the API, and other web properties

Hi everyone,

As part of our ongoing efforts to stay in line with security best practices, we wanted to let you know that we are planning on deprecating support for TLS 1.0 and 1.1 on the Particle API, and some supporting web properties* from 3/11/20.

After this date, these services will only permit TLS connections from clients that leverage TLS 1.2 (which includes all modern browsers).

For the overwhelming majority of browsers/clients, and most importantly, users - this change will have zero impact, since TLS 1.2 support has been a standard, and the default selection for many years. The overwhelming majority of the connections we see to these services today are already made over TLS 1.2.

To prepare for this change, we’ve been monitoring logs closely, to look at TLS versions in use, and are going to be keeping an eye on things right up to the point where we flip the switch and say goodbye to our old friends TLS 1.0 and 1.1.

Why are we doing this? You can read more here about the importance of staying up to date with the latest TLS standards here: https://blog.qualys.com/ssllabs/2018/11/19/grade-change-for-tls-1-0-and-tls-1-1-protocols.

Any questions, feel free to reply in this thread.

  • We’re talking about things like the Console, Particle Site, Login, Blog and Docs
2 Likes

:partying_face: