AWS 宣佈了 API 的 TLS 1.0/1.1 日落期
source link: https://blog.gslin.org/archives/2022/07/01/10769/aws-%e5%ae%a3%e4%bd%88%e4%ba%86-api-%e7%9a%84-tls-1-0-1-1-%e6%97%a5%e8%90%bd%e6%9c%9f/
Go to the source link to view the article. You can view the picture content, updated content and better typesetting reading experience. If the link is broken, please click the button below to view the snapshot at that time.
AWS 宣佈了 API 的 TLS 1.0/1.1 日落期
AWS 宣佈了 API 的 TLS 1.0/1.1 日落期：「TLS 1.2 to become the minimum TLS protocol level for all AWS API endpoints」。
公告裡提到是 2023/06/28：
This update means you will no longer be able to use TLS versions 1.0 and 1.1 with all AWS APIs in all AWS Regions by June 28, 2023.
TLS 1.0 目前還堪用的應該是 AES + CBC 類的 cipher，在正確實做 mitigation 下加減可以用：
對於像是 Java 6 環境這類很老舊的系統，如果真的無法升級的話，可以想到 workaround 的方法是透過 self-signed CA + TLS proxy 來幫忙把 TLS 1.0 的連線請求解開，重包成 TLS 1.2 的連線。
Related
AWS Lambda 可以直接有 HTTPS Endpoint 了
AWS 宣佈 AWS Lambda 可以直接有一個 HTTPS Endpoint 了：「Announcing AWS Lambda Function URLs: Built-in HTTPS Endpoints for Single-Function Microservices」。 如同文章裡面提到的，先前得透過 API Gateway 或是 ALB 才能掛上 Lambda： Each function is mapped to API endpoints, methods, and resources using services such as Amazon API Gateway and Application Load Balancer. 現在則是提供像 verylongid.lambda-url.us-east-1.on.aws 這樣的網域名稱給你用，而且看說明似乎是直接包含在本來的 Lambda…
April 7, 2022In "AWS"
Stripe 宣佈 TLS 1.0/1.1 的退場時間表
Stripe 宣佈了今年的 2/19 會停用測試環境的 TLS 1.0/1.1，並且在 6/13 全面停用：「Completing an upgrade to TLS 1.2」。 Monday, February 19: All servers using older versions of TLS will be blocked from the Stripe API in test mode. Wednesday, June 13: All servers using older versions of TLS will be blocked from the Stripe API…
February 2, 2018In "Computer"
AWS DataSync 支援 GCP 與 Azure 上的 Storage 上的資料了
AWS DataSync 宣佈支援 GCP 與 Azure 上的 Storage 了：「New for AWS DataSync – Move Data Between AWS and Other Public Locations」，比較特別的是，文章的 URL 有提到這兩家的產品，但在標題上反而就沒提到... 這測的重點就是支援 Google Cloud 與 Microsoft Azure 的 object storage 產品： Today, we added to DataSync the capability to migrate data between AWS Storage services and either Google…
May 28, 2022In "AWS"
Leave a Reply
Your email address will not be published. Required fields are marked *
Comment *
Name *
Email *
Website
Notify me of follow-up comments by email.
Notify me of new posts by email.
To respond on your own website, enter the URL of your response which should contain a link to this post's permalink URL. Your response will then appear (possibly after moderation) on this page. Want to update or remove your response? Update or delete your post and re-enter your post's URL again. (Learn More)
Post navigation
Recommend
About Joyk
Aggregate valuable and interesting links.
Joyk means Joy of geeK