Edit

Transport Layer Security (TLS)

  • Article

To ensure a higher level of security, Notification Hubs will disable support for TLS versions 1.0 and 1.1 on December 31, 2020 (extended from April 30, 2020). These older protocols deliver weak cryptography, and are vulnerable to BEAST and POODLE attacks. Applications deployed to devices running Android version 5 or greater, or iOS version 5 or greater, are not impacted by this change as those operating systems support TLS 1.2 and the client and server will negotiate the highest mutually supported version of the protocol upon connection.

We recommend that you review your all of your applications that use Azure Notification Hubs, to ensure that they use the most applicable libraries and TLS stacks that support TLS 1.2.

Update apps

You can ensure that your iOS apps are using TLS 1.2 using Apple's networking security feature called App Transport Security (ATS). ATS cannot be used for SDKs older than iOS 9.0 or macOS 10.11, and you can read further about it from Apple's documentation.

For Android applications using SSLSocket instances, set enabled protocols on each SSLSocket instance as noted in setEnabledProtocols.

The table on the TLS Protocol Compatibility support page helps map operating systems with compatible TLS versions.

For more information, see the overview of the support for TLS protocols on Windows.

Next steps