Menu
Apple to stop SSL 3.0 support for push notifications soon

Apple to stop SSL 3.0 support for push notifications soon

Apple is one of many companies moving to shut down SSL 3.0 for good

Apple will stop support next week for an encryption protocol found to contain a severe vulnerability, the company said on Wednesday.

Support for SSL 3.0 will cease as of Oct. 29, it said.

"Providers using only SSL 3.0 will need to support TLS as soon as possible to ensure the Apple Push Notification service continues to perform as expected," according to a note to developers. "Providers that support both TLS and SSL 3.0 will not be affected and require no changes."

Google researchers revealed last week they found a flaw in SSL (Secure Sockets Layer) version 3.0, which was released more than 15 years ago. SSL has been replaced by TLS (Transport Layer Security), but the old versions are still used by some servers across the Internet and are supported by web browsers.

The researchers found it was possible using a man-in-the-middle attack -- nicknamed "POODLE" -- to downgrade the SSL/TLS connection to the less-secure 3.0 version, where the flaw could allow an attacker to steal a person's authentication cookies. The attacker and victim must be on the same network, posing a risk to people using public Wi-Fi.

Apple said it has already disabled SSL 3.0 on the Provider Communication interface in its developer environment, which will let developers test to make sure push notifications will still reach their applications.

Many companies have moved to stop supporting SSL 3.0 because of the flaw, one of three this year found to affect a wide variety of products across the Internet, including the "Shellshock" Bash vulnerability and "Heartbleed" in OpenSSL.

Send news tips and comments to jeremy_kirk@idg.com. Follow me on Twitter: @jeremy_kirk


Follow Us

Join the newsletter!

Or

Sign up to gain exclusive access to email subscriptions, event invitations, competitions, giveaways, and much more.

Membership is free, and your security and privacy remain protected. View our privacy policy before signing up.

Error: Please check your email address.

Tags AppleExploits / vulnerabilities

Brand Post

Featured

Slideshows

The Kiwi channel gathers for the 2020 Reseller News Women in ICT Awards

The Kiwi channel gathers for the 2020 Reseller News Women in ICT Awards

Hundreds of leaders from the New Zealand IT industry gathered at the Hilton in Auckland on 17 November to celebrate the finest female talent in the Kiwi channel and recognise the winners of the Reseller News Women in ICT Awards (WIICTA) 2020.

The Kiwi channel gathers for the 2020 Reseller News Women in ICT Awards
Leading female front runners honoured at the 2020 Reseller News Women in ICT Awards

Leading female front runners honoured at the 2020 Reseller News Women in ICT Awards

The leading female front runners of the New Zealand ICT industry joined together for the annual Reseller News Women in ICT Awards event at the Hilton in Auckland, during which hundreds of guests celebrated 13 outstanding individuals who won awards, chosen from more than 50 finalists representing over 30 organisations.

Leading female front runners honoured at the 2020 Reseller News Women in ICT Awards
Channel gathers to celebrate the Reseller News Innovation Awards 2020 winners

Channel gathers to celebrate the Reseller News Innovation Awards 2020 winners

More than 500 channel leaders gathered in Auckland on 21 October at the ​Reseller News Innovation Awards ​2020 to celebrate the achievements of the New Zealand technology industry's top partners, start-ups, vendors, distributors and individuals.

Channel gathers to celebrate the Reseller News Innovation Awards 2020 winners
Show Comments