In order to maintain your communication with Zoho Checkout more secure and to meet the updated PCI standards, we will be retiring the support for TLS versions 1.0 and 1.1 on March 31, 2018. After this date, users will be required to update their processing solutions to TLS v1.2 in order to enjoy secure transfer of data.
What is TLS?
Transport Layer Security (TLS) is a cryptographic technology protocol used to provide secure transfer of sensitive information over the internet.
Why is this update necessary?
According to PCI standards, TLS v1.2 is the most advanced protocol yet as it eliminates the vulnerabilities faced by the previous versions, i.e, TLS v1.0 and v1.1. All users who use secure servers and browsers to access the data and API from Zoho are expected to make this update to enjoy a seamless flow of secured data. If you are using a Webhook to link an external site, you are required to support HTTPS and TLS v1.2 in order to receive webhooks from Zoho.
How can I adapt to this change?
As an end user, if you are accessing our applications from any of the web browsers, it should be of the following specifications:
- Internet Explorer version 11 and above
- Google Chrome version 30 and above
- Mozilla Firefox 27 and above
- Safari 7 and above
If you access our applications through any of the mobile platforms, it should be of the following specifications:
- Google Android version 4.1 and above
- iOS 5.1 and above
- Windows phone 8.1 and above
If you are using any of the following programming languages, you will have to upgrade it in order to communicate with our API:
- Java 6u45
- Java 7u25
- OpenSSL 0.9.8y
- .NET 4.5 and below
- .NET 4.5 (settings should be changed to enable TLS 1.2)
Please refer this link for further details regarding the requirements. You can also use this link to test if your browser supports TLS v1.2. Also for API users, we will add a warning node when the connection is made from unsafe systems.
We will keep this space posted for further updates.
Maruthi Kumar S