+- Forums (https://libforum.vccs.edu/forum)
+-- Forum: Web Liaisons: Web and eResource management (https://libforum.vccs.edu/forum/forum-8.html)
+--- Forum: General (https://libforum.vccs.edu/forum/forum-85.html)
+--- Thread: OverDrive to end support for TLS 1.0/1.1 on 10/30/20. (/thread-3486.html)
OverDrive to end support for TLS 1.0/1.1 on 10/30/20. - tcassidy - 08-24-2020
Please see this Aug. 24, 2020 update from OverDrive:
"OverDrive takes data security and patron privacy very seriously. We continue to invest in updating our services to adhere to the latest standards for data protection and security. To be able to offer more current technologies, we are also sometimes required to discontinue support for legacy services that do not meet the newer standards.
Accordingly, we are preparing to end support for devices that use the outdated TLS 1.0 and 1.1 security protocols. TLS (Transport Layer Security) is the technology that keeps data private when it is sent over a secure (https) internet connection. TLS versions 1.0 and 1.1 date back to 1999 and 2006, respectively, and have since been replaced on most devices by TLS 1.2, which addresses weaknesses and vulnerabilities in the earlier versions. At OverDrive, TLS protects the privacy of patron data, including library card information. Please read on for additional information.
Upcoming changes
In alignment with security best practices, and following suit with other technology industry leaders like Apple, Google, and Microsoft, OverDrive will end support for TLS 1.0 and 1.1 on October 30, 2020. After October 30, the OverDrive app and OverDrive websites will no longer work on devices that don't support TLS 1.2.
User impact
This change is most likely to affect Android devices that cannot upgrade to at least Android version 5, including early Kindle Fires, early Samsung Galaxy tablets, and Kobo Arc devices (all of which were released in 2014 or earlier). Based on our analytics, usage of these devices has been declining and currently accounts for approximately 0.5-1% of users across all OverDrive libraries. Most devices that don't support TLS 1.2 are also no longer supported by their manufacturers, cannot access other modern apps and websites, and currently offer a substandard experience with many apps and websites, including your OverDrive service.
To keep using the OverDrive app and OverDrive websites, affected patrons will need to either update their device's operating system (if possible) to a version that supports TLS 1.2 or switch to a device that supports TLS 1.2. Users can also choose to only update their device's browser to a version that supports TLS 1.2, which will allow them to use OverDrive websites in their browser (though they won't be able to use the OverDrive app). Users of early Kindle Fires and other ereaders that don't support TLS 1.2 will still be able to read library ebooks that are delivered or transferred to their Kindle Fire or ereader from a supported device.
Current Libby users on Android devices should not be affected, as Libby’s minimum system requirements were already raised to Android 5 in June 2020.
User messaging
Beginning September 1, 2020, the OverDrive app and OverDrive websites will display a message on devices currently using TLS 1.0 and 1.1 to alert affected users of the upcoming change. This message will link to a help article that explains the change and provides information about the system updates that will be needed to access your OverDrive digital library after October 30.
We understand the inconvenience this may cause for your patrons on affected devices. This change is necessary to uphold our standards of security and patron privacy, and our commitment to delivering a quality experience to all OverDrive users."