Menu
Apple to stop SSL 3.0 support for push notifications soon

Apple to stop SSL 3.0 support for push notifications soon

Apple is one of many companies moving to shut down SSL 3.0 for good

Apple will stop support next week for an encryption protocol found to contain a severe vulnerability, the company said on Wednesday.

Support for SSL 3.0 will cease as of Oct. 29, it said.

"Providers using only SSL 3.0 will need to support TLS as soon as possible to ensure the Apple Push Notification service continues to perform as expected," according to a note to developers. "Providers that support both TLS and SSL 3.0 will not be affected and require no changes."

Google researchers revealed last week they found a flaw in SSL (Secure Sockets Layer) version 3.0, which was released more than 15 years ago. SSL has been replaced by TLS (Transport Layer Security), but the old versions are still used by some servers across the Internet and are supported by web browsers.

The researchers found it was possible using a man-in-the-middle attack -- nicknamed "POODLE" -- to downgrade the SSL/TLS connection to the less-secure 3.0 version, where the flaw could allow an attacker to steal a person's authentication cookies. The attacker and victim must be on the same network, posing a risk to people using public Wi-Fi.

Apple said it has already disabled SSL 3.0 on the Provider Communication interface in its developer environment, which will let developers test to make sure push notifications will still reach their applications.

Many companies have moved to stop supporting SSL 3.0 because of the flaw, one of three this year found to affect a wide variety of products across the Internet, including the "Shellshock" Bash vulnerability and "Heartbleed" in OpenSSL.

Send news tips and comments to jeremy_kirk@idg.com. Follow me on Twitter: @jeremy_kirk


Follow Us

Join the newsletter!

Error: Please check your email address.

Tags ApplesecurityExploits / vulnerabilities

Featured

Slideshows

A snapshot of the Kiwi partners set to shine at the Reseller News Awards

A snapshot of the Kiwi partners set to shine at the Reseller News Awards

With the 2017 Reseller News ICT Industry Awards only weeks away, Reseller News profiles the power line-up of partners set to dominate the biggest night on the channel calendar. ​Ranging from the enterprise, down through the mid-market and small business sectors into the heart of the start-up scene, the end result is the most diverse and wide-ranging partner line-up in the history of the Awards, playing host to the leading innovators of the past 12 months.​

A snapshot of the Kiwi partners set to shine at the Reseller News Awards
Channel celebrates as HP marks 50 years in NZ

Channel celebrates as HP marks 50 years in NZ

HP marked 50 years in New Zealand at an event in the vendor's Auckland's headquarters last night, with a host of key channel figures coming along to celebrate. Photos by HP.

Channel celebrates as HP marks 50 years in NZ
Show Comments