Enable TLS 1.3 on Cloudflare

tls.protocols.no_tls13 · effort: minutes

Why it matters

TLS 1.3 is faster to connect and removes older, weaker options, and every current browser supports it. Your server only offers TLS 1.2, which is safe today but below the common modern baseline.

The fix

Open SSL/TLS then Edge Certificates and make sure TLS 1.3 is switched on. It applies to Proxied hostnames, and Cloudflare then uses all TLS 1.3 cipher suites.

Read the documentation (opens in a new tab)

Reported by the TLS protocol versions check
Turn off TLS 1.0 and 1.1
Enable TLS 1.2 and TLS 1.3

Scan your domain to see whether this applies to you.

Why it matters

The fix

Related