search

daniel-zahariev / php-aws-ses

PHP classes that interfaces Amazon Simple Email Service
307 stars 100 forks source link

Needs support for Amazon signature version 4 #68

Closed stevecoug closed 4 years ago

stevecoug commented 4 years ago

From an email I received today:

Amazon Web Services currently supports Amazon SES API requests that are signed using Signature Version 3 and Signature Version 4 processes. Signature Version 4 further enhances the security around authentication and authorization of Amazon SES customers by using a signing key instead of your secret access key. To improve the security for our customers, beginning October 1, 2020, Amazon Signature Version 3 will be turned off (deprecated) in Amazon SES in favor of Signature Version 4.

Amazon SES customers who are still using Signature Version 3 must migrate to Signature Version 4 by September 30, 2020. After that, Amazon SES will only accept requests that are signed using Signature Version 4. For more information, see Signature Version 4 signing process [1].

What Happens if I Don't Make Updates?

Requests signed with Signature Version 3 that are made after September 30, 2020 will fail to authenticate with Amazon SES. Requesters will see errors stating that the request must be signed with Signature Version 4.

References: [1] https://docs.aws.amazon.com/general/latest/gr/signature-version-4.html

kubec commented 4 years ago

See my pull request #69

nivshah commented 4 years ago

Any chance for movement on this, or any alternative libraries people are using if this one is no longer being maintained?

daniel-zahariev commented 4 years ago

It is supported in the latest version - 0.9.2

Mark-H commented 4 years ago

Given v3 will actually no longer work in October, would it make sense to 1) make it the default moving forward (readme says it needs to be manually enabled) and 2) tag it as a major release?