1. Home
  2. Privacy & Security
  3. Transport Layer Security (TLS) support

Transport Layer Security (TLS) support

New Update

As of Dec 6, 2024, we've disabled support for TLS v1.1 on our API endpoints api.raygun.com and api.raygun.io . We will be supporting TLS 1.2 and 1.3 on the respective endpoints.

You can find more details below.

Raygun’s Transport Layer Security (TLS) support

TLS 1.1 is considered insecure and has been deprecated by many regulatory bodies. We tracked usage of TLS 1.1 over the past year on our API endpoints have noticed it to be very low.

To increase the security posture and promote usage of modern protocols, we are making this change. As of Dec 6, 2024, we've disabled support for TLS v1.1 on our API endpoints api.raygun.com and api.raygun.io from today. We will be supporting TLS 1.2 and 1.3 on the respective endpoints.

Along with that we will be adding support for TLS 1.3 on app.raygun.com which currently supports TLS 1.2 only.

While we have taken due diligence; contacted and informed impacted customers over the past 6 months, if you have concerns or questions please reach out to our support.

Raygun is now adhering to the ELBSecurityPolicy-TLS13-1-2-2021-06 security policy. You can find all the necessary TLS and Cipher information below:

Security policies:

  • ELBSecurityPolicy-TLS13-1-2-2021-06

TLS Protocols that we support:

  • Protocol-TLSv1.2
  • Protocol-TLSv1.3

TLS Ciphers:

  • TLS_AES_128_GCM_SHA256
  • TLS_AES_256_GCM_SHA384
  • TLS_CHACHA20_POLY1305_SHA256
  • ECDHE-ECDSA-AES128-GCM-SHA256
  • ECDHE-RSA-AES128-GCM-SHA256
  • ECDHE-ECDSA-AES128-SHA256
  • ECDHE-RSA-AES128-SHA256
  • ECDHE-ECDSA-AES256-GCM-SHA384
  • ECDHE-RSA-AES256-GCM-SHA384
  • ECDHE-ECDSA-AES256-SHA384
  • ECDHE-RSA-AES256-SHA384

Please refer the following documentation here for more details.

The only major changes are updating the Load Balancer Amazon Policies, resulting in addition of TLS Protocol v1.3

Raygun is now adhering to the AWS ELBSecurityPolicy-TLS13-1-1-2021-06 security policy. You can find all the necessary TLS and Cipher information below:

Security policies:

  • ELBSecurityPolicy-TLS13-1-1-2021-06

TLS Protocols that we support:

  • Protocol-TLSv1.1
  • Protocol-TLSv1.2
  • Protocol-TLSv1.3

TLS Ciphers:

Please refer the following documentation here for a list of ciphers that are supported by ELBSecurityPolicy-TLS13-1-1-2021-06.

As of November 8, 2022, our load balancer is using the TLS-1-1-2017-01 security policy based on Amazon best practice standards, in accordance with our continued commitment to providing a secure platform for our customers.

The only major changes are updating the Load Balancer Amazon Policies, resulting in the removal of TLS1.0 and redirection of HTTP traffic to HTTPS returning a 301 response, and deprecating insecure cipher suites.

Raygun is now adhering to the AWS ELBSecurityPolicy-TLS-1-1-2017-01 security policy. You can find all the necessary TLS and Cipher information below:

Security policies:

  • ELBSecurityPolicy-TSL-1-1-2017-01

TLS Protocols that we support:

  • Protocol-TLSv1.1
  • Protocol-TLSv1.2

TLS Ciphers:

Follow the Ciphers protocols from the AWS’ ELBSecurityPolicy-TLS-1-1-2017-01

Your experience with Raygun will be greatly affected and may include issues such as:

  • Persistent “Waiting for data” screen when trying to set up a new application
  • Inability for Raygun to accept and process your data
  • Failed TLS handshake responses while connecting to the Raygun Crash Reporting endpoint (this does not affect browsers as these are automatically updated to handle the latest ciphers).

Check that your system is up to date and can use the latest industry standard ciphers and TLS protocols. Older versions of Windows such as XP / 7 / 8 / 2002 / 2012 may have issues connecting using newer secure protocols without correct Windows update patches.

Check out the TLS troubleshooting guide from Microsoft for their recommendations.

No, there are no plans for Raygun to support TLS 1.0 in the future. While we apologize for any disruptions, this is necessary to safeguard the security of all customers.

On this page: