2.4.1.2.10. TLS encryption protocol versions

TLS (transport layer security) is an encryption protocol that protects data transmitted over a network. It is used when connecting to a site via HTTPS and exists in several versions, from 1.0 to 1.3. Versions 1.2 and 1.3 are currently relevant. Versions 1.0 and 1.1 are outdated but are still supported on hosting so that customer sites are accessible to all visitors, including those using older devices, browsers, and scripts that do not support TLS 1.2 or 1.3.

Select version

Supported TLS versions can be selected in the "Site protection" section on the "Main settings" tab:

  • Maximum compatibility (TLS 1.0-1.3) (default) — ensures that your site is accessible to visitors using any device or browser.
  • Most modern only (TLS 1.2-1.3) — allows you to get an "A" rating in the test on the SSL Labs site.
    • Visitors with very old browsers and scripts running on old operating systems with OpenSSL 0.9.8 will not be able to access the site (according to our statistics, this is ≈1% of the total number of requests, including both HTTP and HTTPS requests).
    • Weak TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256 encryption will be disabled.
    • ⚠️ To achieve an "A+" rating in the SSL Labs test, the caching period must be at least 180 days (15,552,000 seconds).
Content