Skip to content
Start here

Origin TLS Compliance Modes

Get Origin TLS Compliance Modes setting
GET/zones/{zone_id}/settings/origin_tls_compliance_modes
Replace Origin TLS Compliance Modes setting
PUT/zones/{zone_id}/settings/origin_tls_compliance_modes
Change Origin TLS Compliance Modes setting
PATCH/zones/{zone_id}/settings/origin_tls_compliance_modes
Delete Origin TLS Compliance Modes setting
DELETE/zones/{zone_id}/settings/origin_tls_compliance_modes
ModelsExpand Collapse
OriginTLSComplianceModeGetResponse object { id, editable, value, modified_on }
id: "origin_tls_compliance_modes"

The identifier of the caching setting.

editable: boolean

Whether the setting is editable.

value: array of string

List of TLS compliance modes that constrain the key-exchange algorithms Cloudflare may use when establishing the TLS connection to the zone’s origin. Currently supported values are fips (FIPS-approved curves) and pqh (post-quantum hybrid). Future modes (e.g. cnsa2) may be added; clients should treat unknown values as opaque strings. Multiple modes are combined as the intersection of their permitted algorithm lists; selections whose intersection is empty are rejected. An empty list clears the constraint.

modified_on: optional string

Last time this setting was modified.

formatdate-time
OriginTLSComplianceModeUpdateResponse object { id, editable, value, modified_on }
id: "origin_tls_compliance_modes"

The identifier of the caching setting.

editable: boolean

Whether the setting is editable.

value: array of string

List of TLS compliance modes that constrain the key-exchange algorithms Cloudflare may use when establishing the TLS connection to the zone’s origin. Currently supported values are fips (FIPS-approved curves) and pqh (post-quantum hybrid). Future modes (e.g. cnsa2) may be added; clients should treat unknown values as opaque strings. Multiple modes are combined as the intersection of their permitted algorithm lists; selections whose intersection is empty are rejected. An empty list clears the constraint.

modified_on: optional string

Last time this setting was modified.

formatdate-time
OriginTLSComplianceModeEditResponse object { id, editable, value, modified_on }
id: "origin_tls_compliance_modes"

The identifier of the caching setting.

editable: boolean

Whether the setting is editable.

value: array of string

List of TLS compliance modes that constrain the key-exchange algorithms Cloudflare may use when establishing the TLS connection to the zone’s origin. Currently supported values are fips (FIPS-approved curves) and pqh (post-quantum hybrid). Future modes (e.g. cnsa2) may be added; clients should treat unknown values as opaque strings. Multiple modes are combined as the intersection of their permitted algorithm lists; selections whose intersection is empty are rejected. An empty list clears the constraint.

modified_on: optional string

Last time this setting was modified.

formatdate-time
OriginTLSComplianceModeDeleteResponse object { id, editable, modified_on }
id: "origin_tls_compliance_modes"

The identifier of the caching setting.

editable: boolean

Whether the setting is editable.

modified_on: optional string

Last time this setting was modified.

formatdate-time