Second Life TLS 1.2 update – what works, what doesn’t

secondlifeOn Wednesday, June 15th, 2016, the Lab updated their Web Cashier services to TLS 1.2.

The change, which has been highlighted through official blog posts (and reported through pages such as this blog) has been implemented as a part of both LL’s on-going compliance work and in response to an ongoing  set of regulatory / compliance requirements which are global in scope (as explained by the PCI Security Standards Council).

However, there has been a certain amount of confusion over precisely how widespread the impact of the change will be, and what will or will not be affected.

To this end, and with the switched flipped, Whirly Fizzle and I have been trying older viewer (e.g. pre 4.7.7 Firestorm releases, the official obsolete platform viewer, Singularity) to find out what is and isn’t affected, and seeking feedback from the Lab.

This is what we’ve been able to determine:

If you have a web browser or viewer which supports TLS 1.2 (all recent official viewer releases and TPV updates should support TLS 1.2):

  • You will be able to continue to make in-world L$ transactions as normal
  • You will be able to carry out LindeX transactions and  / or use the SL Marketplace through either your web browser OR the viewer’s built-in browser as usual
  • You will be able to add/edit payment info to your account.

If you are using a web browser which does not support TLS 1.2:

  • You will not be able to make L$ transactions on the LindeX via your browser
  • You will not be able to add/edit payment info to your account.

If you are using a viewer which does not support TLS 1.2:

  • You will still be able to buy L$ through the Buy L$ button / option in the top right corner of the viewer
  • You will still be able to PAY / BUY via right-clicking on other avatars or on in-world vendor systems
  • You will not be able to use your viewer’s built-in browser to perform LindeX transactions and / or make Marketplace transactions. Attempting to do so will result in a Connection Closed message:

With thanks to Whirly Fizzle for the screen capture

  • You will not be able to add/edit payment info to your account.

This should – at this point in time – be the extent of the impact (there might be further changes at some point in the future). If you do note any more, please feel free to provide specifics in the comments below.

My thanks to Whirly Fizzle for her assistance and support in putting this article together.

2 thoughts on “Second Life TLS 1.2 update – what works, what doesn’t

Have any thoughts?

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s