New security requirements for UC ANR websites

sitenum=27

What's new with the Web Action Team

Author: Bruce Lidl

Published on: June 3, 2016

UC ANR encrypted websites will no longer accept connections from browsers lacking modern security features. In line with accepted industry practices and to maintain compatibility with our credit card processing system, browsers unable to use TLS 1.1 or 1.2 cryptographic protocols are not supported for secure connections to ucanr.edu.

Users with incompatible browsers will need to update their software. Recommended are Firefox, Chrome or any other browser that supports modern standards. All compatible browsers enable TLS 1.1/1.2 automatically; they require no special installation instructions. The increased security of ANR websites should impact only a very small number of users with out of date technology, but please contact us if you experience any difficulties.

For more information, please visit:
https://en.wikipedia.org/wiki/HTTPS
https://en.wikipedia.org/wiki/Transport_Layer_Security
http://crypto.stackexchange.com/questions/10493/why-is-tls-susceptible-to-protocol-downgrade-attacks

Comments: 7

Comments:

by Rita Reichard

on June 21, 2016 at 9:22 AM

I have Chrome for my browser. The problem is I also have Windows Vista as my operating system on my desktop. Chrome no longer supports Windows Vista so I can't get the latest update. I am a Master Gardener and need to access VMS, etc. Can I still log on to ucanr.edu portal? If so, how.

Reply by Bryon J. Noel

on July 1, 2016 at 8:19 AM

Firefox still supports Vista... https://support.mozilla.org/en-US/kb/get-latest-version-firefox-windows-xp-vista

Support of Windows Vista will end on 4/11/2017 as seen on the link below. Many software companies no longer support Vista as there are significant differences between Vista and later versions that software needs to account for.

https://support.microsoft.com/en-us/lifecycle?c2=11732

by Jane Rodgers

on June 21, 2016 at 10:06 AM

All of my browsers are up to date (Firefox, Edge, and Chrome) All of the browsers reject ucanr.edu/portal access as they say it is a non secure site using an https prefix. When the https is removed, the site is not found. I am a Master Gardener who needs access to the VMS system to check signups and email other MG's about volunteer opportunities. I can do none of these things at the present time. Please advise me as to when I will be able to access this site. Thank you, Jane Rodgers

Reply by Dave Krause

on June 21, 2016 at 10:50 AM

Everything should be functioning normally again.

by Mary Ann Egan

on June 22, 2016 at 9:56 AM

I have a MacBook Pro and the software is up to date. I use the Safari browser for everything and this is the only site that I am having trouble accessing. Is the site still Mac and Safari friendly??

Reply by Bryon J. Noel

on July 1, 2016 at 8:27 AM

It really depends on the version of Safari. Old versions of Safari do not support TLS 1.1 and 1.2. The version of Safari available to you depends on the Mac OS version. More and more sites will drop support for TLS 1.0 and lower as it becomes required. If you've able to see this blog post then in https then your fine.

https://ucanr.edu/blogs/blogcore/postdetail.cfm?postnum=21207

by Marie Connors

on July 5, 2016 at 2:48 PM

Hello, I am a Master Gardener Hotline volunteer in Orange County. I use an iMac with OS X Yosemite Version 10.10.5 with a Safari browser 9.1.1. Can you tell me if this version is compatible with the UC ANR websites? I seem to be able to use the system now although the "Browser Compatibility Notice"appears when I move from Discussion to Email systems. Is this message a blast sent to everyone or only those who are using an outdated or soon-to-be outdated browser? Thanks, Marie Connors

Thanks