Does Apigee support App Transport Security (ATS)?

[WILLIT51]

Someone recently asked me if Apigee support Apple's App Transport Security (ATS) standards. If I understand ATS correctly, I believe this essentially amounts to supporting the following on our virtual hosts:

• TLS v1.2

• Strong crypto—AES-128 and SHA-2

• Forward secrecy—ECDHE

Apigee virtual hosts should support all of these by default, so I assume the answer is yes. Would you agree?

We have already disabled SSLv3 and earlier. I suppose we could also disable weak ciphers if this is necessary. Any recommendations?

[DChiesa]

I don't know about Apple's ATS, but you are correct that you have control over the proto, the ciphers, and the crypto in virtual hosts in Apigee Edge. So you should be able to configure what you need.

Are you experiencing any problems?

[WILLIT51]

No, no problems. Just doing some preliminary research for an upcoming effort.