Sandbox RC4 Cipher

[seven7]

Hello,

has RC4 cipher been disabled in the sandbox? It appears to still be active.

Received email couple weeks ago that RC4 would be disabled in sandbox on April 29, and disabled in production on May 31.

[Lilith]

@seven7 We're looking into this. Thanks.

[larrymcp]

Thanks, guys for posting this and for checking on it--   I came to the forum specifically to ask about this, and was pleased to see it's already being looked at.   I want to test us out on the sandbox server to make sure we've got no issues with RC4 being disabled.

[Lilith]

Due to circumstances beyond our control, we've had to push the disablement of RC4 in Sandbox, to Tuesday, May 10.

You should be able to test your integrations against Sandbox, to confirm you've remediated against RC4 support, by Wednesday, May 11.

I apologize for the delay.

[larrymcp]

Thank you--  appreciate the update!

[seven7]

Hello,

My test still showing RC4 as an accepted cipher on the sandbox url (test.authorize.net)

can you confirm RC4 was disabled on Tuesday, May 10?

thank you

[Lilith]

@seven7 Unfortunately, we had to push this out one more day. But we expect this to be disabled tonight (Wednesday, May 11) after 10 pm Pacific.

I'll be checking on the cipher status to confirm it's disabled, and will post confirmation to this thead.

We apologize for the further delay.

[RichardH]

Hello,

RC4 is now disabled in the sandbox and is ready for testing.

Richard