Support TLS 1.2 on API connections
Xero has a good SSL configuration on the main app (A+ on SSL labs) but the api endpoint running older and weaker encyrption.
It appears to have some kind of TLS 1.2 support enabled but it drops after the initial hand shake which means that TLS 1.2 needs to be excluded as an option when negotitaing connections. Annoying having to set this up only for Xero.
1
vote
Phillip
shared this idea
TLS 1.2 has now been enabled on the API sites!