CloudCannon incident

TLS 1.0 temporarily enabled for some sites

Resolved after 4 hours, on November 21, 2024.

resolved Nov 21, 2024, 08:14 PM UTC

For 4 hours, the minimum TLS was reset back to the default of 1.0. This impacted cloudcannon.com, cloudvent.net and domains added to CloudCannon before the change over to TLS 1.2 in 2021. This change was made for debugging purposes and has been reverted. Some additional bot traffic was detected during this time with no major impact on bandwidth usage. During this time 131 requests were made with TLS 1.0 and 4 requests were made with TLS 1.1. No security was compromised for legitimate human traffic.

Started
Nov 21, 2024, 04:00 PM UTC
Resolved
Nov 21, 2024, 08:00 PM UTC
Duration
4h
Detected by Pingoru
Nov 21, 2024, 04:00 PM UTC

Update timeline

  1. resolved Nov 21, 2024, 08:14 PM UTC

    For 4 hours, the minimum TLS was reset back to the default of 1.0. This impacted cloudcannon.com, cloudvent.net and domains added to CloudCannon before the change over to TLS 1.2 in 2021. This change was made for debugging purposes and has been reverted. Some additional bot traffic was detected during this time with no major impact on bandwidth usage. During this time 131 requests were made with TLS 1.0 and 4 requests were made with TLS 1.1. No security was compromised for legitimate human traffic.

Your product runs on more than CloudCannon

Add the vendors you depend on and get one message when any of them reports trouble. Free for 3 vendors, no card.

Add your stack →