As of 12:00 AM PDT April 30, 2015, AWS will discontinue support of
SSLv3 for securing connections to S3 buckets. Security research published late
last year demonstrated that SSLv3 contained weaknesses that weakened its
ability to protect and secure communications. These weaknesses have been
addressed in the replacement for SSL, TLS. Since then, major browser software
vendors have been disabling support for SSLv3 and their work is largely
complete. Consistent with our top priority to protect AWS customers, AWS will
only support versions of the more modern Transport Layer Security (TLS) rather
than SSLv3.
For further reading on SSLv3 security concerns and why it is important to disable support for this nearly 18 year old protocol, we suggest the following articles:
Comments