Encryption

Glance encrypts almost all sessions. Session traffic between each participant and the Glance service uses modern Transport Layer Security (TLS) technology.

Each participant’s computer or mobile device uses TLS to negotiate the connection’s cipher suite and key length. Glance also sends each participant a digital certificate, signed by DigiCert or Thawte. The participant’s browser can pass it to a certificate authority to validate Glance’s identity before proceeding. Each connection is then encrypted using the strongest method the corresponding participant supports. SSL, TLS versions earlier than TLSv1.2, and earlier transport security standards are obsolete and disallowed by all Glance servers.

Any participant that cannot establish a secure connection to an encrypted session is denied entry.