Have an older browser? Please update it.

What is happening?

On June 26, 2023, we are making a security upgrade to our website. This is a single step of many. It will help keep our website, staff, and website visitors safer from hackers.

Why do we need to do this?

There is a current piece of internet software that we know to be unsafe.

Will there be any side effects from this change?

Unfortunately, yes. Making things safer will break the website for older browsers.

What do you need to do?

If you have a browser that is older then a year or two, please update it to a current version.

Why do you need to do this?

If you have a browser that is too old to connect with our server, this website will stop working for you on June 26, 2023. You will not be able to visit the SFMTA website until you upgrade your browser.

How can you tell if this will affect you?

There will be a couple early test periods when this website will put the change in for a short time:

• June 8, 2023, our web hosts will test the change for one hour, from 9 am to 10 am Pacific Time (PT).

• June 22, 9 am PT, to June 23, 9 am PT, 2023, our web hosts will test the change for 24 hours.

What if you can't upgrade your browser?

Unfortunately, we cannot delay this change. You would need to use a different way to get information about Muni service and SFMTA programs:

• The San Francisco Public Library (SFPL) has free internet access at all branches. SFPL computer services
• You can call San Francisco 311 (311; 415.701.2311 outside San Francisco) for free help

Be sure to take note of this before June 26, because we can't guarantee you'll be able to read this page beginning June 26.

Will upgrading your browser make your online experience safer?

Protecting everyone is an ongoing task for all of us. We recommend taking these needed steps to protect your data. You will be safer than if you don't upgrade. This is true when you visit SFMTA.com or any other website.

If you need to get a new computer so you can upgrade, can you get financial help?

The federal government has an Affordable Connectivity Program which may be able to provide assistance.

What are the technical details?

Our web host is removing support for obsolete Transport Layer Security (TLS) 1.2 cipher suites. We have been getting visits from various browsers using a cipher suite ECDHE-RSA-AES128-SHA256 which is out of date.

TLS is the standard to send information safely over the internet. TLS 1.3 is the most current version, but TLS 1.2 is still used. 

Cipher suites are the rules for how the information is encoded. As computing power improves, it becomes easier to break into older cipher suites. Those older suites are no longer seen as safe.

When a software company puts out a new version of their browser, most times they will replace older, less secure methods with more recent, safer methods. You have to upgrade to the latest version of the browser to get this protection. You don't have to worry about which cipher suite they are using and you don't have to pick a cipher suite.

Here is the full list of cipher suites that our web host is removing and which will no longer be able to be used to access SFMTA.com:

• ECDHE_RSA_WITH_AES_128_CBC_SHA
• ECDHE_RSA_WITH_AES_128_CBC_SHA256
• ECDHE_RSA_WITH_AES_256_CBC_SHA
• ECDHE_RSA_WITH_AES_256_CBC_SHA384
• RSA_WITH_AES_128_CBC_SHA
• RSA_WITH_AES_128_GCM_SHA256
• RSA_WITH_AES_256_CBC_SHA