Security Policy Updates
Scheduled Maintenance Report for Snapsheet
Completed
The scheduled maintenance has been completed.
Posted Aug 22, 2023 - 10:15 CDT
In progress
Scheduled maintenance is currently in progress. We will provide updates as necessary.
Posted Aug 22, 2023 - 10:00 CDT
Update
In order to enable partners to prepare for this transition, we have applied this update our external facing UAT testing environments. This can be used to validate successful API connections in advance of next week's update.
Posted Aug 16, 2023 - 10:41 CDT
Scheduled
At 10am Central Time on August 22nd, Snapsheet will perform a network upgrade to ensure the security of all communication of our applications and services. After this point, CBC ciphers will be excluded. If any integrations use libraries that connect to Snapsheet services use the following ciphers, they will begin to see TLS handshake failures:
ECDHE-RSA-AES128-SHA256 (IANA Name: TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256)

ECDHE-RSA-AES256-SHA384 (IANA Name: TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384)

After the update, Snapsheet will only support communication via the following TLS protocols and ciphers:

Permitted Protocols
- TLSv1.2
- TLSv1.3

Permitted Ciphers
- TLS-AES-128-GCM-SHA256
- TLS-AES-256-GCM-SHA384
- TLS-CHACHA20-POLY1305-SHA256
- ECDHE-ECDSA-AES128-GCM-SHA256
- ECDHE-RSA-AES128-GCM-SHA256
- ECDHE-ECDSA-AES256-GCM-SHA384
- ECDHE-RSA-AES256-GCM-SHA384
Posted Aug 15, 2023 - 11:00 CDT
This scheduled maintenance affected: Snapsheet Payments (US, EU), Snapsheet Claims (US, EU), and Snapsheet Appraisal Services (US, EU).
← Current Status Powered by Atlassian Statuspage