[Eril-l] Springer and WAM proxy woes

Tue May 1 07:53:35 PDT 2018

At Springer Nature we are continuing to take steps to move towards a more secure web browsing experience for our users by removing support for any version of Transport Layer Protocol lower than 1.2.  The support for lower versions ended on 31 May 2018 and will not be reversible.  It might be possible that users within your organization may be negatively impacted if you are using older browsers and services.  Web traffic analysis suggests that less than 5% of all visitors should be affected by this change.  I am copying III support on this message.

What is Transport Layer Security protocol?

In short it is an important piece of security enabling privacy and protection for data transmitted between client / server applications.  TLS version 1.0 was introduced in 1999 and it is no longer as secure as later versions, namely v1.2 released in 2008.  Springer Nature has dropped support for TLS below v1.2 starting 31 May 2018. All clients able to speak TLS v1.2 will be considered safe and thus allowed to communicate with our servers.

What does removing this support mean for you and your users?

For most users there will be no noticeable change except improved security.  TLS v1.2 has been supported by all major browsers since 2016 and is activated by default in the settings. Mobile browsers running on older smart devices and end-of-life machines are the most likely to be affected.

What do you need to do to ensure you can continue to access Springer Nature websites on 1 May 2018 and beyond?

It depends on your browser.  There are ways to check for Chrome, Firefox, Safari, Internet Explorer, Opera, Edge, and others.  However as a rough guide, browsers or technologies of the following specification or lower will no longer work on Springer Nature sites:

·         Android 4.3

·         Baidu Jan 2015

·         IE7 / Vista

·         IE8 / XP

·         IE 8-10 / Win 7

·         IE 10 / Win phone 8.0

·         Java 6u45

·         Java 7u25

·         OpenSSL 0.9.8y

·         Safari 5.1.9 / OS X 10.6.8

·         Safari 6.0.4 / OS X 10.8.4

What about proxy or proxy services?

If you use a proxy service like EZProxy or WAM you will need to check with your proxy provider or IT staff to make sure your proxy uses TLS v1.2 when communicating with our websites.  We understand many of our customers use EZproxy and WAM and as such we’ve already communicated this change with OCLC and hereby communicate it to III.  They have updated the stanza for SpringerLink stating EZproxy version 6.1.16 or later is required to proxy with SpringerLink.

OCLC advised us that the only version of EZproxy that they still support that is not compliant with TLS v1.2 is version 6.0.8.  If you are running EZproxy locally that is older than version 6.1.16 it may not work to proxy on TLS v1.2.  Please contact OCLC for further information if either of these scenarios apply to you.

---
Robert Boissy
Director
Institutional Marketing & Account Development - Americas
Springer Nature
233 Spring Street, New York, NY 10013, USA
M  +1 (781) 244 7918
robert.boissy at springernature.com
www.springernature.com
---

Springer Nature aims to advance discovery by publishing robust and insightful research, supporting the development of new areas of knowledge and making ideas and information accessible around the world. We provide the best possible service to the whole research community.

From: Eril-l [mailto:eril-l-bounces at lists.eril-l.org] On Behalf Of Divan, Linda A
Sent: Tuesday, May 01, 2018 10:36 AM
To: Diane Westerfield
Cc: eril-l at lists.eril-l.org
Subject: Re: [Eril-l] Springer and WAM proxy woes

We've had this problem since last Monday.

Every day I check just to see if they might have resolved the problem but not told us - and today it seems to be working as expected!

We use WAM and today our proxied urls are working as expected.

Linda Divan
Library Systems Co-ordinator
Centennial Library
Cedarville University
251 N. Main St.
Cedarville, OH  45314

937-766-7843
divanl at cedarville.edu<mailto:divanl at cedarville.edu>

On Mon, Apr 30, 2018 at 6:39 PM, Diane Westerfield <dwesterfield at coloradocollege.edu<mailto:dwesterfield at coloradocollege.edu>> wrote:
Hey everybody!

If you’re on Millennium or Sierra with WAM Proxy, you may want to take a look at Springer. We’re getting a redirect error on proxied links. With journals you can get a little further in than ebooks but still can’t get to articles. We started seeing this last week. Innovative has told us they’ve heard a number of complaints from customers, but it’s on Springer’s end. If you’re experiencing problems, please drop Springer a line.

Thanks,

Diane Westerfield, Electronic Resources & Serials Librarian
Tutt Library, Colorado College
diane.westerfield at coloradocollege.edu<mailto:diane.westerfield at coloradocollege.edu>
(719) 389-6661

_______________________________________________
Eril-l mailing list
Eril-l at lists.eril-l.org<mailto:Eril-l at lists.eril-l.org>
http://lists.eril-l.org/listinfo.cgi/eril-l-eril-l.org<https://urldefense.proofpoint.com/v2/url?u=http-3A__lists.eril-2Dl.org_listinfo.cgi_eril-2Dl-2Deril-2Dl.org&d=DwMFaQ&c=vh6FgFnduejNhPPD0fl_yRaSfZy8CWbWnIf4XJhSqx8&r=BlxzeTldHFj4251CvAoJheQefJsbeSDauxWAjEhRDE0&m=ZHTRI3nteMUYdJV2X3V9pPUPR3tGaQB4Fd00GNVDhhE&s=nxfGxP-Go8qRpVEvP-1tkPthcnklvMVYP-5Ysb_PtUU&e=>

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.eril-l.org/pipermail/eril-l-eril-l.org/attachments/20180501/325c699f/attachment-0001.html>