Encryption Protocols and Cipher Suites for Teams API Communication

Vishal Pandey 20 Reputation points
2024-11-13T12:48:12.67+00:00

Our organization uses the bot Framework API to send messages to Teams, and we want to ensure that our configuration adheres to recommended security practices.

We would like to know:

  1. The exact encryption protocol version (e.g., TLS 1.2 or TLS 1.3) used for API communication with Teams.
  2. A list of cipher suites supported and preferred for secure data transmission with the Teams workspace API.
  3. Any guidelines for testing or verifying that our connection uses the most secure cipher suite when sending messages to Teams endpoints.

Thanks

Microsoft Teams Development
Microsoft Teams Microsoft Teams for business Other
{count} votes

Accepted answer
  1. Prasad-MSFT 8,981 Reputation points Microsoft External Staff Moderator
    2024-11-14T05:44:17.4333333+00:00

    Microsoft Teams uses Transport Layer Security (TLS) for encrypted communication. The exact encryption protocol version used for API communication with Teams is TLS 1.2. This ensures that data transmitted between your bot and Teams is encrypted and secure.

    The supported cipher suites include those that use AES-256 (in GCM mode) for encryption, which is a strong and secure encryption method.

    https://learn.microsoft.com/en-us/microsoftteams/teams-security-guide

    https://learn.microsoft.com/en-us/microsoftteams/teams-end-to-end-encryption

    0 comments No comments

0 additional answers

Sort by: Most helpful

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.