In the interest of improving internet security and to employ best practices, TLS 1.0 is being sunset--across the entire internet--in favor of TLS 1.1 and 1.2. (If you are interested in learning more about changes to the TLS protocol across the internet, click here.) Salsa Labs is actively working on disabling TLS 1.0 for Salsa’s Services. The rest of this document covers what you need to know in regard to just Salsa products.
Affected Salsa Labs Products
- Salsa CRM
- Salsa CMS
- Salsa Classic
- Salsa Engage
- Givezooks
- FriendRaising
If you are not sure about what product you are using, click here to find out.
What You Need To Do
Probably nothing. Most browsers included support for TLS 1.1 and 1.2 several years ago. For example, Chrome and Firefox have supported TLS 1.1 and 1.2 since Fall 2013. So if you have upgraded one of these browsers in the past four years or so, you’re probably good to go. However, it never hurts to verify. And if you do need to update your browsers, we recommend an update to a browser that supports TLS 1.2, since this is the latest standard.
If you are using one of the Salsa Labs products listed above, via an internet browser, you can make sure that you are ready for this change by using your Salsa Product on one of the following web browsers during the shutdown periods (shown below):
- Chrome - v30 or above
- Firefox - v27 or above
- Internet Explorer - v11
- Edge - all versions
- Opera - v17 and above
- Safari - v6 or above on iOS; v7 or above on OS X
After the permanent shutdown, be sure to continue to use a browser that supports TLS 1.1 and 1.2. Click here for a comprehensive list of browsers that support TLS 1.1 and 1.2.
What You Should Tell Your Supporters
You may want to let your supporters know that--to keep their internet working--they need to be upgraded to a browser that supports TLS 1.1 and 1.2.
Salsa APIs
If you are not using Salsa APIs, you don't need to read this section. If you are using API calls for Salsa Labs products, we recommend that you use the short-term shutdowns (shown below) to test your API. If your API doesn’t work after during a test shutdown, you’ll need to update TLS to 1.1 or 1.2 on the platform you are connecting to via the API. There are several shutdowns before the permanent shutdown, so you’ll have plenty of time to test.
When Will Salsa Implement these Changes?
TLS 1.0 Shutdown Schedule
The following scheduled shutdowns will enable you to verify how you will be affected by the elimination of TLS 1.0.
|
Date of Shutdown |
Shutdown Type |
Affected Products |
Shutdown Period (EST) |
|
March 26, 2019 |
Temporary |
|
8 AM - 10 AM (2 hours) |
|
April 30, 2019 |
Temporary |
|
1 PM - 3 PM (2 hours) |
|
May 28, 2019 |
Temporary |
|
1 PM - 4 PM (3 hours) |
|
June 18, 2019 |
Permanent Sunset |
|
1 PM |
What is Salsa Labs Going to Do?
Salsa Labs will ensure that all Salsa Labs services are capable of using TLS 1.2, depending on the external service requirements.
Payment Gateway Communication and Other Outbound Services
Salsa Labs is actively working with external vendors, including payment-gateways, to ensure that our products can communicate securely over TLS 1.1 and 1.2. We have a schedule in place to upgrade all our communication with our payment gateways and outbound services before 30 March 2018.