On Wednesday, November 29 at 9:00 AM Eastern time IcePortal will be adding support for the TLS 1.3 cryptographic protocol. TLS 1.3 provides a more streamlined and secure connection protocol as well as an enhanced handshake process, reducing latency and speeding up connections via fewer round trips.
The TLS 1.3 implementation will support the following ciphers: • TLS_AES_128_GCM_SHA256 • TLS_AES_256_GCM_SHA384 • TLS_CHACHA20_POLY1305_SHA256
IcePortal will continue to support TLS 1.2 and the following ciphers: • ECDHE-ECDSA-AES128-GCM-SHA256 • ECDHE-RSA-AES128-GCM-SHA256 • ECDHE-ECDSA-AES128-SHA256 • ECDHE-RSA-AES128-SHA256 • ECDHE-ECDSA-AES256-GCM-SHA384 • ECDHE-RSA-AES256-GCM-SHA384 • ECDHE-ECDSA-AES256-SHA384 • ECDHE-RSA-AES256-SHA384
Because we are only adding to the existing supported protocols and not removing any there should be no disruption to your service. If your servers already support TLS 1.3 they should connect to us automatically using the preferred protocol (in the order displayed above).
If you wish to check your TLS 1.3 prior to November 29 we have already deployed this update to our UAT platform.