Don’t Delay, Migrate Today (Away from SSL/Early TLS)

**PCI-DSS guidance:** As of June 30, 2018 SSL and early TLS are no longer permitted on public (untrusted) networks for PCI compliance; organizations must migrate to TLS v1.1+ or implement QSAs-approved compensating controls, maintain quarterly compliant scans, and note limited exceptions for existing POS/POI terminals which may remain compliant only under strict conditions and subject to future vulnerabilities.