Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

What is happening?

Starting in September October 2024, we will begin enabling TLSv1.3 and disabling CBC ciphers which are now considered insecure, please see below the schedule for disablement. This approach will prevent any TLS connections that use only CBC ciphers from connection to access Qvalent/Westpac services as per our obligations for PCI compliance. 

...

TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (0xc02f)

ALL QVALENT TEST ENVIRONMENTS HAVE CBC CIPHERS DISABLED AND TLSv1.3 ENABLED

How do I know if we are ready for this change? 

...

To quickly test your browser compatibility, you can visit our test page, which has the new TLS settings implemented. 

...

Services

CBC disablement and TLSv1.3 enablement schedule

Test environments (all)

*.staging.qvalent.com was implemented 20th May, 2024.

*.support.qvalent.com will have TLSv1.3 enabled and CBC ciphers disabled on 3rd of July 2024.

Production environments (web browser access)

October 2, 2024

Production environments (REST API integration):

October 8, 2024

Production environments (API integration):

October 15, 2024

Production environments (Token Requests):

October 22, 2024

Production environments (file transfer):

October 29, 2024

...