SSL Protocols and Ciphers

---

Learn how Spektion uses SSL Protocols and Ciphers for secure transport of data.

NOTE

Spektion's API, dashboard, event ingestion, and Sensor management require a minimum of TLS 1.2 to communicate securely.

Spektion offers a range of protocols and ciphers designed to balance security and compatibility for our users. Our servers will select the most secure cipher combination supported by the client, based on the prioritized order listed below. The available ciphers vary depending on the endpoint and the negotiated TLS version.

The following TLS Protocols and Ciphers are supported for all Spektion services:

TLS Protocols

• TLSv1.2
• TLSv1.3

TLS Ciphers

• TLS_AES_128_GCM_SHA256
• TLS_AES_256_GCM_SHA384
• TLS_CHACHA20_POLY1305_SHA256
• ECDHE-ECDSA-AES128-GCM-SHA256
• ECDHE-RSA-AES128-GCM-SHA256
• ECDHE-ECDSA-AES128-SHA256
• ECDHE-RSA-AES128-SHA256
• ECDHE-ECDSA-AES256-GCM-SHA384
• ECDHE-RSA-AES256-GCM-SHA384
• ECDHE-ECDSA-AES256-SHA384
• ECDHE-RSA-AES256-SHA384

This set of protocols and ciphers reflects Spektion’s official support. However, clients may occasionally negotiate ciphers with higher strength ratings than those listed above.