TLS 1.3 Encryption Standard
Every byte transmitted between your device and our printing infrastructure is protected with next-generation cryptographic transport protocols.
Strict TLS 1.3 Only
Obsolete ciphers and legacy protocol fallbacks (TLS 1.0/1.1/1.2) are permanently disabled at the gateway.
Perfect Forward Secrecy
Every session generates unique ephemeral keys via ECDHE. Past traffic cannot be retroactively decrypted.
AES-256 GCM at Rest
Transient cloud buffers are encrypted at rest with authenticated 256-bit Galois/Counter Mode ciphers.
1. Why We Enforce TLS 1.3
TLS 1.3 significantly enhances both security and handshake speed compared to older protocols. By removing obsolete cryptographic algorithms (such as RSA key exchange, CBC ciphers, and SHA-1), TLS 1.3 eliminates vulnerabilities like ROBOT, POODLE, and BEAST attacks.
2. Supported Cipher Suites
Our edge endpoints accept exclusively modern AEAD (Authenticated Encryption with Associated Data) ciphers:
3. Point-to-Point Hardware Isolation
When a merchant station receives your print job, the transmission occurs over mutual TLS (mTLS) authorized through hardware machine certificates issued during merchant onboarding. No rogue device can spoof a print destination.