End-of-Life for Heroku Private Spaces TLS v1.0/v1.1 support scheduled for September 30th, 2022
Change effective on 16 September 2021
The one year end-of-life window for TLS v1.0/v1.1 support for Heroku Private Spaces begins 30 September 2021 for a targeted end-of-life date of 30 September 2022.
Heroku has begun removal of support for older TLS versions, and will only support TLS v1.2 or greater for Private Spaces after one year from September 30, 2021. The legacy cipher suites spaces-tls-legacy and spaces-strict-tls used for backwards compatibility with older clients will no longer be supported after September 30, 2022. Users and their historical clients will need to upgrade from the less-secure TLS versions v1.0/v1.1 during this window.
We recently changed the default ciphers used on all new Heroku apps deployed in Private Spaces to support only TLS v1.2+. On July 31, 2021, we completed the EOL for TLS v1.0/v1.1 support on the common runtime, and we are now following the same process for Private Spaces to comply with Salesforce TLS guidelines as well as the broader internet security best practices.
See the TLS v1.0/v1.1 End Of Life Schedule for more details on the anticipated changes, expected timetable, and instructions on how to upgrade your apps in a Private Space to the most up-to-date security and infrastructure.