Secure Socket Layer (SSL)
PCIComplianceHubLast updated
An obsolete cryptographic protocol for securing network communications, superseded by Transport Layer Security (TLS). Every version of SSL contains known weaknesses that cannot be fixed by configuration. PCI DSS has not accepted SSL or early TLS as strong cryptography since 30 June 2018, and they may not be used to protect account data in transit or relied on as a security control. TLS 1.2 or higher is required. The name survives in product and library names such as OpenSSL and in the phrase SSL certificate, both of which mean TLS in practice.