Go to All Forums

Attention Site24x7 users : Withdrawing RC4 support for Site24x7 service from 28th Oct, 2015

by Rex1

RC4  is  an  encryption  cipher  used  in  protocols  such  as  SSL / TLS . RC4  ciphers have  long been  considered  problematic  because  of  their  vulnerability  to a number of cryptographic weaknesses that can be exploited. To know more about RC4 vulnerabilities, have a look at the current  IETF  draft . 

We wish to bring to your attention that due to these security vulnerabilities, we will be phasing out support for the RC4 encryption algorithm from 28th Oct 2015 .

We will stop extending support to the following RC4 ciphers for our SSL / TLS protocols.

TLS _ RSA _ WITH_RC4_128_ SHA 

TLS _ ECDHE _ RSA _ WITH_RC4_128_ SHA

Analysis  of connections to Site24x7 services  show  that  only 0.1% of users utilize RC4 in their protocols. As a Site24x7 user, depending on how you access Site24x7 service, there are  two cases in which this can affect  you -

  1. Accessing Site24x7 services through API  calls: 
    If you have configured your integration to access Site24x7 services  through API calls,  you  may  need  to  reconfigure  your current  integration so that it uses a more secure alternative  such  as  AES. If your integration  was provided  by a third-party vendor please do get in touch with them and  re-configure  your integration. If you are uncertain of your current integration, please provide us the name of your third-party vendor or a copy of your code snippet so that we can assist you.
  2. Accessing  Site24x7 services through browser: 
    If you are accessing Site24x7 services  using Internet Explorer(IE6  or less) on Windows XP(or lower) you will not be able to access site24x7.com. Similarly, people who access Site24x7 services  through outdated browsers on devices such as old mobile phones will not be able to access site24x7.com. 

    As a workaround, we strongly recommend Windows XP users to switch to a newer version of Windows. If this is not possible, you will need to use updated versions of browsers such as Firefox/ Chrome to access site24x7.com.

Please keep in mind that failure to make these changes before 28th Oct 2015  will render you unable to access Site24x7 services.

Please write back to us at support@site24x7.com  if you need any clarification.

Like (0) Reply
Replies (0)