question

larmi avatar image
larmi asked Jeffrey Blattman commented

Security Questions

Wondering if the Dev Team can help answer our questions.

We would like:

1) to know where data from Clover Marketplace apps is stored. (For example, gift card apps)

2) any security documentation related to the devices. (What OS, how are updates performed, what encryption suites are used, etc)

3) if there are any network requirements (firewall ports that must be opened, websites that can't be blocked, etc)

We are hoping to have you provide information to us without pointing us back to the developer website.

Thank you for your time!

Clover Station
10 |2000
Toggle Comment visibility. Current Visibility: Viewable by all users

Up to 2 attachments (including images) can be used with a maximum of 512.0 KiB each and 1.0 MiB total.

1 Answer

·
Jeffrey Blattman avatar image
Jeffrey Blattman answered Jeffrey Blattman commented

Clover devices are Payment Card Industry certified to meet their rather rigorous security requirements.

1. Data for Clover apps is stored in the Clover cloud. Data storage for other non-Clover market apps is up to the developer.

2. Updates are performed securely, OTA. We use and support various different encryption suites. It would help if you could narrow down your question. SSL ciphers? Clover devices run a customized versions of AOSP ranging from 4.2.2 to 10.0, currently.

3. http://public.clover.com/networks.json is the list of IP addresses and ports that need to be unblocked.

2 comments
10 |2000
Toggle Comment visibility. Current Visibility: Viewable by all users

Up to 2 attachments (including images) can be used with a maximum of 512.0 KiB each and 1.0 MiB total.

larmi avatar image larmi commented ·

Jeffrey, I really appreciate your response! Sorry for being so vague in the 2nd question. Do you have any security documentation, such as a whitepaper or technical note, for the Clover products? SSL encryption information would be welcome. Also, what encryption do the devices use?

0 Likes 0 ·
Jeffrey Blattman avatar image Jeffrey Blattman ♦♦ larmi commented ·

If it's not on docs.clover.com then no. You can inspect what SSL protocols / cipher suites we support by using sites like ssllabs.com. "what encryption do the devices use?"- this question is too broad. I don't want to discuss publicly the details of where and what encryption we use beyond what's exposed in our public facing endpoints. If you're a developer you can speak to your developer relations contact. If you're a merchant you can speak with customer support.

0 Likes 0 ·

Write an Answer

Hint: Notify or tag a user in this post by typing @username.

Up to 2 attachments (including images) can be used with a maximum of 512.0 KiB each and 1.0 MiB total.

Welcome to the
Clover Developer Community