Search:


Print View | Enable Glossary

Event Details

Event Name:PCI - SSL/TLS can no longer be used as a Security Control after this date
Date:June 30, 2016
Start Time:All Day Event
Duration:1 day
Description:

The Padding Oracle on Downgraded Legacy Encryption (POODLE) is a vulnerability in Secure Socket Layer (SSL) 3.0 that allows attackers to decrypt data in communications between a web browser and website. In light of this serious exposure the PCI SSC no longer considers SSL, as well as early versions of Transport Layer Security (TLS), as strong cryptography and cannot be used as a security control after June 30, 2016.

PCI SSC Document: Migrating from SSL and Early TLS Information Supplement