We(Zoho Creator) want to let you know that we are upgrading our TLS standards to the latest version 1.2 which is more secure and meets the updated PCI standards. We will be retiring the support for TLS versions 1.0 and 1.1 on 31 August 2018. After this date, all our users will be required to update their processing solutions to TLS v1.2 for the secure transfer of data with us. 

What is TLS?

Transport Layer Security (TLS), formerly Secure Sockets Layer (SSL), is the old security standard for setting up connections between systems. It requires encrypting information in transit to ensure privacy, and authenticating the systems involved to make sure information doesn't end up in the wrong hands.

Why is this update necessary?

TLS doesn't meet security standards anymore. It has some vulnerabilities without viable solutions, so it's being replaced with a more secure protocols.

According to PCI standards, TLS v1.2 is the most advanced protocol yet as it eliminates the vulnerabilities faced by the previous versions, i.e, TLS v1.0 and v1.1. All users who use secure servers and browsers to access the data and API from Zoho are expected to make this update to enjoy a seamless flow of secured data. If you are using a Webhook to link an external site, you are required to support HTTPS and TLS v1.2 to receive webhooks from Zoho.

What is your part as an end user?
Web User:

As an end user, if the customer is accessing our applications from any web browser, it must belong to one of the following specifications to support TLS 1.2 

• Internet Explorer version 11 or above ( For IE 9 & IE 10 settings should be changed on the customer end to enable TLS1.2 )
  

• Google Chrome version 30 or above
  

• Mozilla Firefox 27 or above
  

• Safari 7 or above
  

Mobile User:

If the customer accesses our applications through a mobile platform, it must belong to the following specifications: 

• Google Android version 4.1 or above
  

• IOS 5.1 or above
  

• Windows Phone 8.1 or above
  

API User:

If the customer is using any of the following programming languages, they must upgrade to communicate with our API: 

• Java 6u45
  

• Java 7u25
  

• OpenSSL 0.9.8y
  

• .NET 4.5 and below
  

• .NET 4.5 (settings should be changed to enable TLS 1.2)
  

Please refer this link for further details regarding the requirements. You can also use this link to test if your browser supports TLS v1.2. Also for API users, we will be initiating individual mail communication.

We will keep this space posted for further updates.