4 ms·
No, they are definitely shutting off all TLS less than 1.2, it's required to keep PCI certification.
by habitue 8y ago
No, they are definitely shutting off all TLS less than 1.2, it's required to keep PCI certification.
- fybe 8y agoPCI requirements are TLS 1.1 minimum. Stripe's change is of course is due to PCI certification and 1.2 is strongly encouraged, but 1.2 is not the defacto version required. They could have just disabled 1.0 and keep 1.1. Just wanted to correct the info. (Also happy that they didn't take the minimum and took the extra effort to implement 1.2) Source: https://blog.pcisecuritystandards.org/are-you-ready-for-30-june-2018-sayin-goodbye-to-ssl-early-tls https://blog.pcisecuritystandards.org/are-you-ready-for-30-j...