Skip to main content
Operations

SSL/TLS Compliance — Industry Standards and Regulations

An overview of TLS-related compliance considerations, including PCI DSS, GDPR, and industry requirements.

CertOne1 min read

Certificate and TLS compliance requirements vary by industry and jurisdiction. This article introduces common considerations.

1. PCI DSS​

1. Payment card industry requirements​

PCI DSS calls for strong cryptography to protect payment data.

2. SSL/TLS configuration​

  • Use TLS 1.2 or later
  • Disable insecure protocols
  • Use strong cipher suites

2. GDPR​

1. Data protection​

Protecting personal data in transit is part of an appropriate data security strategy under GDPR.

2. HTTPS​

Use HTTPS to encrypt personal data in transit.

3. Other requirements​

1. Industry standards​

Your industry may impose specific TLS requirements.

2. Regional regulations​

Compliance requirements may differ between jurisdictions.

Conclusion​

Identify and meet the certificate and TLS requirements that apply to your industry and jurisdiction.