There are several variables and a number of systems and software platforms involved.

Unfortunately, this is not a simple answer. What do I need to do to ensure that my site is compliant? Your SSL certificate is only handled incoming traffic to your web server, it doesn’t address calls your web server is making to other services. If you are responsible for an eCommerce application, check out the flowchart in our eBook to determine if you are using outdated encryption. These eCommerce solutions are typically either self-hosted or hosted by the implementer that created or is responsible for the application. Some examples of third party eCommerce solutions are AspDotNetStorefront, Magento, ZenCart, and Episerver, among many others. However, if you use a third party or a custom-built eCommerce solution, then you will need to verify that you are protected. If you use a hosted eCommerce solution like Weebly® or Shopify®, you are most likely already protected. This means that your payment processing and real-time shipping rates could stop working at some point over the next year if you don’t address it. Second, crucial functions on your website will stop working overtime as the services your website uses require TLS 1.2. In the event of a data breach, consequences for not being PCI compliant can include fines and your merchant bank can terminate your ability to process credit cards. What are the consequences if I don’t upgrade to TLS 1.2?įirst and foremost, your customer’s data is at risk. The dates for when they will refuse TLS 1.0 connections are not clear, but your safest action is to upgrade to TLS 1.2 sooner than later. Services such as PayPal,, Stripe, UPS, FedEx and many others already support TLS 1.2 and have indicated that they will eventually refuse TLS 1.0 connections. Even though you have some time before it is required for PCI compliance, several internet services are moving to require the support of TLS 1.2 as early as next year. The latest PCI compliance standards require that any site accepting credit card payments use TLS 1.2 after June 30th, 2018*. Without TLS, you wouldn’t be able to use your credit card on eCommerce sites or log into your bank account online.ĭue to several weaknesses found in TLS 1.0, many websites and internet services are now starting to require the use of TLS1.2. TLS stands for “Transport Layer Security.” It is the security protocol that allows computers to communicate over the internet securely, without the transmissions being vulnerable to anyone they aren’t intended for.

Test tls 1.2 support in net framework