Transport Layer Security (TLS) v1.0 will be disabled for all Iowa Domain Applications

As part of the Iowa Finance Authority's continued efforts to maintain the highest security standards and align with industry best practices, the Transport Layer Security (TLS) v1.0 encryption protocol is planned to be discontinued on 12/17/17.

What is Transport Layer Security?  It is a protocol that provides privacy and data integrity between two communicating applications. It’s the most widely deployed security protocol used today, and is used for web browsers and other applications that require data to be securely exchanged over a network. 

What is the Change?  Due to its age, TLS v1.0 is no longer considered secure by industry standards and has gradually been discontinued across most services. In order to remain compliant, the State of Iowa will update its server environments to accept only TLS v1.1 and TLS v1.2, which may prevent customers that are still using TLS 1.0 from accessing some services. 

How will this Impact Users Visiting Iowa Finance Authority Web-Based Applications?  After TLS 1.0 is disabled, any inbound connections to or outbound connections that rely on TLS 1.0 will fail. Since most computers and browsers are being updated automatically to the latest versions, the discontinuance of TLS 1.0 will affect very few users.   Further details regarding browser versions and their TLS support is available here .