Update TLS versions

In some circumstances - specifically when an application allows client-initiated SSL/TLS renegotiation - previous versions of SSL/TLS can be more vulnerable to DDoS attacks.

When you use an SSL/TLS certificate issued by Cloudflare¹, you can reduce the impact of this vulnerability by:

• Updating the Minimum TLS Version accepted by your application.
• Allowing TLS 1.3.

Additional resources

For more details on this vulnerability, refer to Secure Server- and Client-Initiated SSL Renegotiation ↗.

Footnotes

1. Meaning either Universal or Advanced certificates. ↩

Was this helpful?

What did you like?

Accurate

Easy to understand

Solved my problem

Helped me decide to use the product

Other

What went wrong?

Hard to understand

Incorrect information

Missing the information

Other

Thank you for helping improve Cloudflare's documentation!