Zapier Update: TLS 1.0 and 1.1 Deprecation
On August 13, 2019, we'll be removing support for TLS versions 1.0 and 1.1 from Zapier—we will only allow TLS version 1.2 or newer. This is an important security upgrade, and it will only affect less than 0.5% of visitors to Zapier.
The short version: If you're using an older browser and/or operating system, you may need to update in order to use Zapier. See below for more detail.
What Is TLS?
Transport Layer Security (TLS) is a protocol to provide secure communications over a network. One of the most common uses is as the backing protocol for HTTPS connections, providing the encryption service between the browser and the web server. It's also used for many other applications, such as email, instant messaging, and voice over IP (VoIP) communication. TLS is the successor to the Secure Sockets Layer (SSL).
TLS 1.0 was introduced in 1999, and as decades-old technology, it has been susceptible to a number of attacks, including POODLE and BEAST. It also supports cryptographic ciphers that are known to be weak and shouldn't be used. TLS 1.1 doesn't have any real known vulnerabilities, but like TLS 1.0, it supports weak cryptography and is best left behind.
Why Now?
In a nutshell, it's an easy way to be sure that we continue keeping our users' data safe.
Since TLS 1.2 was introduced in 2008, it's had a fairly slow adoption, but most of the internet now supports it. Google Chrome has already dropped support of earlier versions, and other major browsers are getting ready to do so in the coming months. That means it's time to make the switch ourselves and bid farewell to TLS 1.0 and 1.1.
Will I Be Affected?
The most likely users to be affected are those on Windows XP/Vista/7 that are also using an older version of Internet Explorer (7-10).
To be more specific, these platforms are the most likely to be affected:
- Android 2.3.7
- Android 4.0.4
- Android 4.1.1
- Android 4.2.2
- Android 4.3
- Safari 5.1.9 + OS X 10.6.8
- Safari 6.0.4 + OS X 10.8.4
- Internet Explorer 7 + Windows Vista
- Internet Explorer 8 + Windows XP
- Internet Explorer 8-10 + Windows 7
- Internet Explorer 10 + Windows Phone 8.0
If you're using one of those systems, you might need to take action.
I'm Affected: What Should I Do?
The simplest thing is to update your web browser to the latest version. If you're using Internet Explorer, you might need to install one of the other major browsers (Chrome, Firefox, or Opera). In some cases, updating your browser may require an operating system update as well.