We enabled Online Certificate Status Protocol (OCSP) stapling to allow HTTPS to connect faster while ensuring that sensitive data remains private. For customers with a My Domain, we’re accelerating domain requests with Salesforce Edge and removing instance names from My Domain URLs through release updates.

  • Streamline External Certificate Verification with OCSP Stapling
    To keep your information secure while improving performance, we implemented Online Certificate Status Protocol (OCSP) stapling. OCSP stapling allows HTTPS to connect faster and ensures that sensitive data remains private. When the application calls out to an external HTTPS encrypted website with OCSP stapling enabled, that website attaches—or “staples”—a verification of their HTTPS certificate to their response. The verification contains digitally signed and timestamped information from their Certificate Authority vendor, proving that the certificate is valid and current.
  • Stabilize URLs for Visualforce, Experience Builder, Site.com Studio, and Content Files (Update, Postponed)
    We’re removing the instance names from Visualforce, Experience Builder, Site.com Studio, and content file URLs. An instance name identifies where your Salesforce org is hosted. Instanceless domains are cleaner and easier for users to remember. This update applies to orgs that have a deployed My Domain. After this update is activated, a URL that includes the instance name, such as a bookmark, automatically redirects to the new hostname. Released in Spring ’18, this update was scheduled for automatic activation on July 11, 2020 and has been postponed to Summer ’21.
  • Stabilize the Hostname for My Domain URLs in Sandboxes (Update, Enforced)
    We’re removing instance names from MyDomain URLs for sandboxes. The instance name identifies where your Salesforce sandbox org is hosted. Removing the instance name makes the URL cleaner and easier for users to remember. For example, MyDomain–SandboxName.my.salesforce.com replaces MyDomain–SandboxName.cs5.my.salesforce.com. This update was first made available in Summer ’18 and is enforced in Summer ’20.
  • Route My Domains Through Salesforce Edge (Update, Enforced)
    With this update, we accelerate domain requests for My Domains. You can keep the same My Domain address, but requests go through Salesforce Edge. Salesforce Edge uses machine-learning technology to improve connectivity and performance. This update was first available in Winter ’20 and is enforced in Summer ’20.
  • My Domain Name Length Requirement Was Changed
    To meet iOS requirements, new My Domain names must be at least 3 characters long. If your existing My Domain name has only 2 characters, you can experience an inability to access Lightning Experience when accessing your sandbox My Domain URL using iOS. To resolve this issue, rename your My Domain.

https://help.salesforce.com/s/articleView?id=release-notes.rn_security_domains.htm&release=226&type=5

Privacy Preference Center