Post by Shaun Mitschrich, an Infrastructure Engineer for Quizlet’s Platform team.
Quizlet is upgrading its method of Secure Communication (SSL/TLS) to TLS 1.2 or higher beginning July 1, 2018, in order to align with industry best practices for security and data integrity. The vulnerabilities within SSL and early TLS are serious. A slew of high-profile breaches caused by POODLE, Heartbleed and Freak are due to weaknesses within the protocols.
While this won’t affect most of our users, if you’re using an older browser you may need to take some action before this date to make sure you can keep using Quizlet. If you’re one of the users who might be impacted, you’ve probably seen the banner below stating that "You're using an outdated browser." If you have, or if you’re not sure, please keep reading to make sure you can keep using Quizlet without any disruption.
What do I need to do?
The best and easiest way to avoid any disruption is to simply make sure your browser and mobile applications are up to date. To do this, you can visit outdatedbrowser.com or our Help Center for information on how to download the most recent version of a number of browsers, all of which support these new security requirements and will keep you studying on Quizlet.
If for some reason you want to run an older browser version, in some cases you may be able to enable TLS 1.2 manually. You can find more information on if that may work for you here.
What is TLS?
TLS stands for “Transport Layer Security.” It is a technical protocol that helps keep connections on the web secure using encryption and identity verification and is the most widely deployed security protocol used today. All connections to Quizlet use TLS as a key component of their security, which is what produces the green lock in the URL bar showing the connection to Quizlet is secure.
What is the change?
There have been several versions of TLS released, including TLS 1.0, 1.1, 1.2, and 1.3. Quizlet is upgrading to only support TLS 1.2 or higher starting on July 1, 2018. On that date we will begin disabling the TLS 1.0 and 1.1 encryption protocols, which may prevent some people from accessing Quizlet.
Why would I be impacted?
After Quizlet disables support for TLS 1.0 & 1.1, any connections to Quizlet that try to use those older versions of TLS won’t work. While most current browsers are already set up to automatically handle TLS 1.2 and 1.3, this change could impact Android users if they still run Android KitKat (4.4), or older, as well as web users who may still use very old browsers.
Why is this happening?
Quizlet is committed to privacy and data protection as core company values. Part of that commitment is making sure that we regularly review our systems to ensure they are using the latest security protocols. This change to require TLS 1.2 or later supports our efforts to maintain the highest security standards and promote the safety of our users’ data.
What if I need help?
Visit Quizlet’s Help Center and click Contact Us to reach the Support team.