TLS/SSL Security

Your Files.com site is automatically secured with Transport Layer Security (TLS), previously named Secure Sockets Layer (SSL), so that all network communication with Files.com is secure. This includes strong protection against "man-in-the-middle" (MITM) attacks, which is how we earn an A+ score on the Qualys SSL Grader tool.

On some networks, users receive SSL error messages that include the text "This site can't provide a secure connection" and ERR_SSL_PROTOCOL_ERROR. These errors can also present as CORS errors.

Most of the time, this is caused by a network that is intercepting HTTPS traffic and re-encrypting it using a certificate that does not belong to Files.com. This is frequently performed by corporate or enterprise networks for data loss protection, security, phishing protection, etc.

There is no way for a web browser or application to differentiate between this sort of "approved" interception of the secure HTTPS connection and a MITM attack where an attacker inserts a malicious interception point in your network.

The vendors and product names we typically see associated with this sort of activity include ZScaler, Symantec WSS, Comcast Business, Palo Alto, SecurityEdge, and Akamai, but there are many others.

You have a few options to address problems created by SSL/TLS Protocol filtering. It's not possible to disable or alter Files.com's TLS requirements, but you may be able to change your connection.

The typical solution to resolving these error messages is for the network/firewall administrator to whitelist traffic on *.files.com or [subdomain].files.com so that they will not try to interfere with our SSL traffic. Files.com continues to serve a secure, encrypted connection even without SSL/TLS protocol filtering.

You may be able to avoid firewall situations like this with our Custom Domain feature. With a custom domain, your users would access your Files.com site via your own domain (e.g. files.YOURDOMAIN.com) instead of a files.com subdomain. We provide a matching SSL certificate and two dedicated IP addresses exclusive to your site as part of this feature.

Alternatively, you can connect to Files.com via a VPN or another network that will not interfere with Files.com's SSL traffic.