SSL · Fix guide
TLS protocol configuration needs attention
- TLS
- Transport Layer Security
TLS 1.2 could not be negotiated or an obsolete TLS version is still accepted.
What are TLS protocol versions?
TLS versions define how encrypted web connections are negotiated. TLS 1.2 and 1.3 are current baselines; TLS 1.0 and 1.1 are obsolete and should normally be disabled.
What to do next
- Enable TLS 1.2 or newer at the edge and origin.
- Disable TLS 1.0 and 1.1 after checking legacy-client requirements.
- Use a modern cipher profile supplied by your platform.
Useful links
How to verify the fix
Test protocol versions at every public endpoint after caches and edge configuration update.
When this result may be wrong
A CDN and origin can have different policies, and some local TLS libraries cannot test every protocol reliably.
Ready to check again?
Check a domain
Run a fresh report after DNS caches and platform changes have had time to update.