TLS (Transport Layer Security)

Owned by Thomas Sherman (Deactivated)
Aug 29, 2017
2 min read

Projector only supports connections to our servers over TLS 1.1+. Support for TLS 1.0 was deprecated in August of 2017 as the protocol now has a number of known security vulnerabilities. In addition, TLS support is deprecated by the PCI Security Standards Council.

This help page aims to familiarize you with TLS and how to check whether your applications are TLS 1.1+ compliant.

 

Management Portal

Our Management Portal desktop application depends on Microsoft's .NET libraries to provide TLS encryption. Because of that, you'll need an up-to-date version of .NET or an older version can work if security hotfixes are applied. See the NET help page for more information.

 

 

Software Applications

Your software applications that interact with Projector will also need to support TLS 1.1+. You can inspect an outgoing request through a program called Fiddler. 

  1. Install Fiddler
  2. In Fiddler go to Tools | Options | HTTPS tab. Make sure Capture is ON, Decrypt is OFF.

  3. Go to the Filters tab in upper right
    1. Tick checkbox Use Filters
    2. Set dropdown to Show only the following hosts 
    3. Enter *.projectorpsa.com 

  4. Ensure that File | Capture Traffic is on

  5. Send a request from your application
  6. Click on the request, then choose TextView from the request area. Check the TLS version. See screenshot.

 

 

Browsers

All major browsers dropped TLS 1.0 support several years ago. In general, browsers should just work. This website has a list of TLS support by browser.