Turn off TLS 1.0 and 1.1 on Vercel
Why it matters
TLS 1.0 and 1.1 are deprecated and no current browser uses them, but leaving them on lets attackers and old tools negotiate weaker encryption. Turning them off costs almost nothing today.
Staged change. Do this in stages and check each one before the next, so a mistake does not break your site or your mail.
The fix
Not possible on Vercel. Vercel does not let you choose the TLS versions it offers, so there is nothing to change in your project. If this host's DNS points at Vercel, contact Vercel support. If it points elsewhere, or a proxy sits in front, check which service terminates TLS and apply that service's setting.
Related
- Reported by the TLS protocol versions check
- Enable TLS 1.2 and TLS 1.3
- Enable TLS 1.3
Scan your domain to see whether this applies to you.