topic Re: TLS Service Supports Weak Cipher Suite in APIs & Integrations

TLS Service Supports Weak Cipher Suite

THC — Wed, 27 Dec 2023 05:50:23 GMT

Hi All,

I have a query regarding TLS Service Support for Weak Cipher Suites, which has been raised by our client's IT team. They have described an issue and requested that we disable or remove the TLS_RSA_WITH_3DES_EDE_CBC_SHA protocol. Unfortunately, I can't provide more details due to confidential data. They have shared a description with us, and I would like to understand the nature of this issue and how to address it.

Re: TLS Service Supports Weak Cipher Suite

Jaycee_Lewis — Wed, 27 Dec 2023 17:36:42 GMT

Hi, @THC 👋 Thanks for your question. Here is the documentation for the setting and opts for TLS settings.

Can we modify our own TLS settings?– HubSpot Legal (you may need to manually scroll down to the specific section)
TLS version knowledge base article

If your client's IT team has specific requirements that go beyond the standard options provided by HubSpot, it would be best to raise a support ticket with support. This way, they can inquire directly about any advanced or additional TLS configuration options that might not be publicly documented.

As far as I'm aware, the options listed in the public documentation and knowledge base are usually the ones available. And it doesn't hurt to double-check with support for any specific concerns or custom requirements your client might have.

Best,

Jaycee

Re: TLS Service Supports Weak Cipher Suite

THC — Thu, 28 Dec 2023 04:38:29 GMT

Thanks Jaycee,

This would be a great help to us in preventing this issue. We updated the TLS version to "1.2+", which has the strongest protocols of ciphers. Some details we gathered from the HubSpot support were a great help. Thanks again for the help 🙂