We are announcing the end of life (EOL) for TLS_RSA_WITH_AES_128_CBC_SHA (weak) TLS cipher support under ftps://ftp.box.com domain effective October 24th, 2024.
Our proprietary FTPS service will continue to be available to end users with support for following, safe TLS ciphers:
-
TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
-
TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
-
TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256
-
TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384
-
TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256
-
TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384
-
TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256
-
TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384
Please make sure that both your operating system and FTPS client or any other entry-point you might be using to access Box through FTPS is compatible with the above.
If this is a challenge or if you wish to shift to an alternative, we recommend suitable replacements including Box Drive, Box APIs or CLI, or E-mail upload.