Confirm

Confirm OnDemand UK - HTTP connections to web services

  • 1.  Confirm OnDemand UK - HTTP connections to web services

    Pitney Bowes
    Posted 15 days ago

    On Sunday 29 September 2019 changes were made in the Confirm OnDemand UK environment.  This is the communication Rob Gan (Senior Manager of Product Development) sent to Confirm OnDemand superusers.

    -------------------------------------------------------------------------------------
    Confirm® OnDemand UK
    – HTTP Connections to Web Services

     

    As part of the migration to AWS we communicated our plans to only support secure HTTPS access to our Web Services, removing the ability to use insecure HTTP. The use of HTTP to access Confirm's Web Services leaves your systems and data vulnerable to attack and possible data breaches.

     

    After the migration it became clear that many devices / interfaces had not been updated to use HTTPS so we temporarily enabled HTTP access to allow users the opportunity to switch to the new URLs without loss of service or data. However, we are still seeing significant, continued HTTP traffic.

     

    Please can you ensure that you check all of your mobile devices and external interfaces are only using HTTPS URLs to access Confirm OnDemand. We plan to disable HTTP access on Sunday 29th September 2019.

     

    Note that we will continue to support HTTP for EToN transactions as this data is in the public domain and some EToN systems do not support current HTTPS security protocols.

     

    Please contact Tech Support or myself if you have any questions.

    Kind regards,

    Robert Gan

    Senior Manager of Product Development
    -------------------------------------------------------------------------------------

    ConfirmConnect users who did not make the change will not be able to do any transfers or sign out because the HTTP URL is no longer valid.  In this case they will have to close the app and delete or rename the Confirm.db file that is in the Confirm folder on the device.  When they log in again they will see the sign in screen and they need to re-enter the new URL and the other details.

    The Tasks that were stuck on the Transfer tab will have to be re-entered when the inspector signs in.


    ------------------------------
    Chris Wareham
    Senior Technical Support Analyst
    Pitney Bowes
    ------------------------------