Viewpost customers use HTTPS to securely connect with the Viewpost application (app.viewpost.com). We use the Transport Layer Security (TLS) protocol to encrypt these connections. To ensure the security of our systems and maintain our compliance with the PCI Data Security Standard (PCI DSS) for safeguarding payment data, Viewpost is updating its product to require a minimum of version 1.2 of TLS for all HTTPS connections.
Support for TLS versions 1.0 and 1.1 is being deprecated and will discontinue on June 25, 2018.
As a result, customers attempting to connect to Viewpost using unsupported browser versions will be unable to do so.
To continue using Viewpost, you will need to upgrade to a more modern browser with support for TLS 1.2 or later.
For applications integrating with Viewpost products, all HTTPS and API connections will require a minimum connection strength of TLS 1.2 or later.
This article covers the following topics:
- What does this mean?
- Why is Viewpost removing this?
- Am I affected?
- What do I need to do?
- What browsers do I need to use?
- What happens if I didn't migrate before the removal date?
- Who should I contact if I need help or have questions?
What does this mean?
Viewpost will stop accepting TLS based HTTPS connections made using TLS versions 1.0 and 1.1 beginning June 25, 2018. As a result, customers and applications attempting to connect with older versions of TLS will not be able to establish a secure connection and be unable to access Viewpost products.
Between the announcement and deprecation, Viewpost will not make any feature enhancements to connections supporting TLS versions 1.0 and 1.1, but will continue to make minor bug and security fixes at our discretion.
After deprecation, Viewpost will no longer address bugs and minor issues specific to connections supporting TLS versions 1.0 and 1.1. We will continue to resolve any major breakage in functionality until the deprecation date. After deprecation, Viewpost will also no longer provide support for connections supporting TLS versions 1.0 and 1.1.
After the deprecation date, if you are connecting using TLS versions 1.0 and 1.1, you will fail to establish a connection and will be unable to access Viewpost products.
Why is Viewpost removing this?
The PCI Council has mandated that support for version 1.0 of the TLS cryptographic standard should be deprecated by June 30, 2018 for companies to stay compliant with the PCI Data Security Standard (PCI DSS).
Am I affected?
All users of the Viewpost online application (https://app.viewpost.com) are affected. This change does not affect the delivery of invoices or payments.
What do I need to do?
To continue using Viewpost, you will need to be using a modern browser, such as Internet Explorer 11, Mozilla Firefox 27, Google Chrome 30, or Apple Safari 7 or newer. Mobile versions of Viewpost will also fail to connect securely on Android OS version 4.1 and below, or the Android Browser on Android 4.4.4 and below. Customer's with iOS devices prior to iOS 5.1 will also be unable to connect to Viewpost securely after the deprecation date. Customers should update the version of mobile operating systems to gain support for TLS 1.2 or use a more modern browser with support for TLS 1.2.
What browsers can I use?
|Firefox||58, 59, 60, 61|
|Chrome||49, 63, 64, 65, 66, 67, 68|
|iOS Safari||10.3, 11.2, 11.3|
|Chrome for Android||64|
|UC Browser for Android||11.8|
|Samsung Internet||4, 6.2|
What happens if I don’t migrate before the removal date?
You will be unable to securely access Viewpost beginning June 25, 2018.