Enable TLS 1.3 on Caddy

Why it matters

TLS 1.3 is faster to connect and removes older, weaker options, and every current browser supports it. Your server only offers TLS 1.2, which is safe today but below the common modern baseline.

The fix

1. Caddy enables TLS 1.3 by default. If it is missing, a tls block caps the maximum protocol. Remove the cap and reload.

example.com {
	tls {
		protocols tls1.2 tls1.3
	}
}

The examples use example.com. Replace it with your own domain.

Read the documentation ↗(opens in a new tab)

Related

• Reported by the TLS protocol versions check
• Turn off TLS 1.0 and 1.1
• Enable TLS 1.2 and TLS 1.3