Context
We are committed to maintaining the highest standards of security and compliance for our services. As part of this ongoing effort, we will be updating the SSL certificate for video.api.vonage.com to utilize the ECDSA P-384 algorithm. This algorithm offers cryptographic strength equivalent to RSA 7680 and aligns with current industry regulations and best practices.
Why are we making this change?
- Enhanced security for Vonage APIs
- Continued compliance with evolving regulations
- Improved efficiency and performance
We are announcing this update ahead of deployment to keep you informed. The new certificate will be rolled out to production effective Feb, 22nd 2026.
Applies To
- Video API
Expected Impact
This change is designed to be seamless and should not impact customers using modern operating systems, browsers, or SDKs. No action is required on your part if your systems are kept up to date.
You can find supported Vonage Video SDK versions and their SLA’s here: on Tokbox and on Unified.
The following Video API SDK versions will not be impacted:
- Android SDK, all versions
- iOS SDK, all versions
- Windows SDK, all versions
- Linux SDK, all versions
- Mac SDK, all versions
- React Native SDK, all versions
The following browser versions will not be impacted:
- Chrome version 69 (2018) and above
- Firefox version 53 (2017) and above
- Safari version 11 (2017) and above
The following platform versions will not be impacted:
- Android 8 (2017) and above
- iOS 12 (2018) or above
- Windows 10 (2015) or above
- macOS 10.13 (2017) or above
The Server SDKs are not a factor in this change, and do not require updating.
Types of users of the Video API who may experience impact.
We expect that customers using older platforms are more likely to experience trouble connecting after this update.
Some legacy devices and applications may fail to connect because they do not support modern ECDSA certificates or they do not send SNI (Server Name Indication), which is required for today’s secure connections.
-
Sessions with Participants using older unsupported browsers may be impacted:
- Chrome version 68 (2018) and earlier
- Firefox version 52 (2017) and earlier
- Safari version 10 (2017) and earlier
-
Very old mobile platform versions may be impacted:
- Android 7 or below (2016)
- iOS 12 or below (2018)
- Windows 8.1 (2014) or below
- macOS 10.12 (2016) or below
Additional Information
- The original catalyst for this change is for a customer in Germany see BSI TR-02102-1
- ECDSA is considered the preferred algorithm https://blog.cloudflare.com/ecdsa-the-digital-signature-algorithm-of-a-better-internet/ vs RSA
- Changes to SSL certificates will rotated more frequently in the future https://www.sectigo.com/47-day-ssl-guide
- SSL Certificate - https://www.ssllabs.com/ssltest/analyze.html?d=video.api.vonage.com&s=168.100.81.10&hideResults=on
Related Articles
https://developer.vonage.com/en/blog/announcing-ssl-security-enhancements