## Change Origin TLS Compliance Modes setting `origin_tls_compliance_modes.edit(OriginTLSComplianceModeEditParams**kwargs) -> OriginTLSComplianceModeEditResponse` **patch** `/zones/{zone_id}/settings/origin_tls_compliance_modes` Update the set of TLS compliance modes for the zone. PATCH performs a full replace of the modes list, not a merge — the request body is treated as the complete new list, and any modes not present in it are removed. (To remove a single mode from an existing configuration, send the updated list without it.) The request body must be of the form `{"value": ["fips", "pqh"]}`. Currently supported modes are `fips` and `pqh`; an empty list clears the constraint. Future modes (e.g. `cnsa2`) may be added; clients should treat unknown values as opaque strings. Invalid mode values are rejected with a 4xx response. ### Parameters - `zone_id: str` Identifier. - `value: Sequence[str]` List of TLS compliance modes that constrain the key-exchange algorithms Cloudflare may use when establishing the TLS connection to the zone's origin. Currently supported values are `fips` (FIPS-approved curves) and `pqh` (post-quantum hybrid). Future modes (e.g. `cnsa2`) may be added; clients should treat unknown values as opaque strings. Multiple modes are combined as the intersection of their permitted algorithm lists; selections whose intersection is empty are rejected. An empty list clears the constraint. ### Returns - `class OriginTLSComplianceModeEditResponse: …` - `id: Literal["origin_tls_compliance_modes"]` The identifier of the caching setting. - `"origin_tls_compliance_modes"` - `editable: bool` Whether the setting is editable. - `value: List[str]` List of TLS compliance modes that constrain the key-exchange algorithms Cloudflare may use when establishing the TLS connection to the zone's origin. Currently supported values are `fips` (FIPS-approved curves) and `pqh` (post-quantum hybrid). Future modes (e.g. `cnsa2`) may be added; clients should treat unknown values as opaque strings. Multiple modes are combined as the intersection of their permitted algorithm lists; selections whose intersection is empty are rejected. An empty list clears the constraint. - `modified_on: Optional[datetime]` Last time this setting was modified. ### Example ```python import os from cloudflare import Cloudflare client = Cloudflare( api_token=os.environ.get("CLOUDFLARE_API_TOKEN"), # This is the default and can be omitted ) response = client.origin_tls_compliance_modes.edit( zone_id="023e105f4ecef8ad9ca31a8372d0c353", value=["fips", "pqh"], ) print(response.id) ``` #### Response ```json { "errors": [ { "code": 1000, "message": "message", "documentation_url": "documentation_url", "source": { "pointer": "pointer" } } ], "messages": [ { "code": 1000, "message": "message", "documentation_url": "documentation_url", "source": { "pointer": "pointer" } } ], "success": true, "result": { "id": "origin_tls_compliance_modes", "editable": true, "value": [ "fips", "pqh" ], "modified_on": "2014-01-01T05:20:00.12345Z" } } ```