Enable TLS 1.2 and TLS 1.3 on Cloudflare
Why it matters
The server accepts neither TLS 1.2 nor TLS 1.3, so current browsers cannot connect securely or at all. The software behind it is typically years out of date.
Staged change. Do this in stages and check each one before the next, so a mistake does not break your site or your mail.
The fix
- Proxied hostnames are served by Cloudflare's edge, which supports modern TLS. If this finding still appears, the host is probably DNS only (grey cloud), so switch the record to Proxied, or fix your own server.
- Also check that SSL/TLS then Edge Certificates has Minimum TLS Version set to TLS 1.2 or higher.
Related
- Reported by the TLS protocol versions check
- Turn off TLS 1.0 and 1.1
- Enable TLS 1.3
Scan your domain to see whether this applies to you.