Security

Why your eFront portal uses the TLS 1.2 protocol

TLS 1.2 (Transport Layer Security) is one of the latest and most secure versions of the SSL/TLS protocol. It is used to prevent, among other dangerous actions, message tampering, interception, and forgery.

eFront supports the use of HTTPS to ensure the secure exchange of information to and from your portal. In alignment with the industry’s best practices on security and data protection, eFront implemented the TLS 1.2 encryption and removed the older HTTPS supports.

Browsers

To turn TLS 1.2 active in your web browser, update it to the latest version or make sure you use the following versions or newer:

  • Google Chrome - v38 or higher

  • Mozilla Firefox - v27 or higher

  • Apple Safari - v7 or higher

  • Microsoft Edge

  • Microsoft Internet Explorer - v11 or higher

Notes:

- Google Chrome: TLS 1.2 will also work on versions between 22 and 37, but only when running it on Windows XP SP3, Vista, or more recent, OS X 10.6 (Snow Leopard) or newer (for desktops), or Android 2.3 (Gingerbread) or newer (for mobile).

- Mozilla Firefox: TLS 1.2 will also work on versions between 23 and 26, but not by default.

- Internet Explorer: IE versions from 7 to 10 need the TLS 1.2 to be enabled manually (Tools > Internet Options > Advanced). This setting can be applied to multiple users by using a group policy.

Mobile

  • Android: v5.0 or higher to be enabled by default (starting from 4.4 (KitKat) to 4.4.4 enabled but not by default)

  • iOS: v5.1 or higher 

REST API

To use our API, first make sure that your implementation supports TLS 1.2 encryption. The general requirements, depending on your platform of choice, are:

  • OpenSSL - v1.0.1.j or higher

  • cURL - v7.34.0 or higher

  • Network Security Services (NSS) - v3.15.1 or higher

  • .NET Framework - v4.6.1 or higher

Note: .NET Framework v4.5 also supports TLS 1.2 if you set it accordingly.

Related articles