---
sourceDocument: Australia Platform security
sourceDocumentLink: https://servicenow-prod.fluidtopics.net/r/de-DE/platform-security

 Release :

    - australia

ft:locale :

    - de-DE

ft:publication_title :

    - Australia Platform security

ft:clusterId :

    - psec

bundleId :

    - psec

workflow :

    - Platform


---

# Communications

# Communications {#ariaid-title1}

This control ensures proper encryption using strong algorithms and ciphers. This
includes ensuring the recommended version of TLS is used for client connectivity, use of strong
cipher suites, use of trusted and signed certificates, ensuring connections are encrypted
between components and logging of connection failures.
* **[Enforce certificate trust \[Updated in Security Center 1.3, removed in 2.0, added in 7.0\]](Cx1dyxQIyLlkzrCjBnFWiw)**   
  Use system properties to ensure that certificate expiration and trust are checked for certificates received from outbound HTTPS call endpoints when host verification is not performed.
* **[Disable outbound SSLv2/SSLv3 connections \[Updated in Security Center 1.3\]](_rn5yvFk_YGCD1WRLqXG9g)**   
  Use the glide.outbound.sslv3.disabled property to force the MID Server to use TLS when making outbound connections, such as REST and SOAP requests. Normally, outbound connections from an instance are forced to use TLS instead of SSL.
* **[Do not use demo certificates for active saml configurations \[Updated in Security Center 1.5\]](X73mhhkCNQFJa1Nkk2zZvA)**   
  Control whether demo certificates are used in production SAML configurations.
* **[Disable deprecated TLS versions](https://servicenow-prod.fluidtopics.net/_DwzETucXlKJotPgca6NIA)**   
  Avoid loss or leakage of sensitive data by disabling deprecated TLS versions.
* **[Enforce OCSP check on network error \[New in Security Center 1.3 and updated in 2.0\]](4eqb4Q2QE8fKWUQXHUYJlw)**   
  Learn how to configure the com.glide.communications.httpclient.ocsp_allow_network_error property to prevent bad actors from bypassing Online Certificate Status Protocol (OCSP) checks.
* **[Verify certificate chain and hostname \[New in Security Center 1.3 and updated in 2.0\]](upaAbS__UHyQ~ZFJBin8Mw)**   
  Configure the com.glide.communications.httpclient.verify_hostname property to prevent man-in-the-middle-attacks by ensuring that the certification verification process is executed.
* **[Verify certificate revocation \[New in Security Center 1.3\]](4dWZ9LmI9zrGmgODIsOSog)**   
  The com.glide.communications.httpclient.verify_revoked_certificate property checks certificate revocation during the Transport Layer Security (TLS) handshake to ensure that security checks are not bypassed.