Security Notice for TLS and Cipher Support

Appraisal Firewall Platform to Migrate Away from Older TLS & Cipher Versions

 

As we continually enhance and strengthen our security posture to meet best practices and regulatory requirements, SharperLending Solutions is planning to retire several TLS versions and ciphers and only support the versions listed below.

You are receiving this notice because you are on record as being a valued vendor connecting to the Appraisal Firewall real estate appraisal platform.

For some vendors, you may already be using these versions listed below and this migration will have minimal impact on end users. For other vendors that are on older versions, we know that migrating to TLS versions can be a challenge. As a digital technology vendor ourselves serving the mortgage and finance industry, we understand this challenge well and want to assist you in any way we can.

We will be running a test period where we will migrate to only these supported versions listed here for two hours starting Monday, August 29th, 2022, from 9:00am-11:00am Pacific Time.

During this test period we will be evaluating and identifying vendor connections with versions outside of this scope so remediation can be made.

TLSv1.3:

  • TLS_AES_128_GCM_SHA256
  • TLS_AES_256_GCM_SHA384
  • TLS_CHACHA20_POLY1305_SHA256

TLSv1.2:

  • ECDHE-ECDSA-AES128-GCM-SHA256
  • ECDHE-RSA-AES128-GCM-SHA256
  • ECDHE-ECDSA-AES256-GCM-SHA384
  • ECDHE-RSA-AES256-GCM-SHA384
  • ECDHE-ECDSA-CHACHA20-POLY1305
  • ECDHE-RSA-CHACHA20-POLY1305
  • DHE-RSA-AES128-GCM-SHA256
  • DHE-RSA-AES256-GCM-SHA384

Our goal for this migration is to only accept TLS and ciphers versions listed here from all vendor connections starting Monday morning, September 26th, 2022.

If there are other individuals in your organization that should be notified concerning SharperLending network and connectivity changes, please forward this message on to them and let us know if you would like us to add them to future notifications like this one.