TLS 1.0 and 1.1 Blackout

[Rob Blackburn]

As part of our continual work to ensure the trust and integrity of the ORCID registry we are planning to remove support for TLS 1.0 and 1.1.  This will affect our public API, member API and OAuth services.  Our logs indicate this will affect less than 0.5% of our API traffic.

In order to help the community transition, we are scheduling a planned outage of 24 hours starting 3pm UTC Tuesday 5th October and ending 3pm UTC Wednesday 6th October.  

Services that encounter handshake failures during the planned outage will have a month to upgrade to a more modern security protocol before we switch off support for good at 3pm Tuesday 9th November UTC.

   

For more information on why TLS 1.0 and 1.1 have been deprecated, please see RFC8996