SSL/TLS & Website
TLS version check
Whether your server still accepts retired encryption (TLS 1.0 and 1.1) and whether it offers the current one (TLS 1.3).
Check this on your own domain now. It is free with a DomainGuard account and works on any domain. The check reads only what your domain publishes, and gives you a report you can send to whoever runs your website.
What we look at
We check which TLS protocol versions your server will complete a handshake over: accepting TLS 1.0 or 1.1 is a warning, and so is not offering TLS 1.3. Our scanner reads this straight off your server, the way a browser does: every day for the domains DomainGuard watches on Starter and up, and whenever you press Scan now on a domain in your account. The quick one-off tools on this site cannot read a certificate, so they show whether HTTPS works but not this row.
Why it matters to your business
No current browser needs TLS 1.0 or 1.1, and the IETF formally retired both in 2021 (RFC 8996). PCI DSS has required TLS 1.0 to be switched off since June 30, 2018, and security reviews from insurers and larger customers often ask about both. TLS 1.3 is faster and more secure; not offering it is a small, easy win to collect.
How to fix it
- Disable TLS 1.0 and 1.1 in your server, load balancer or CDN settings (Cloudflare: SSL/TLS → Edge Certificates → Minimum TLS Version 1.2).
- Enable TLS 1.3.
If you would rather not touch DNS or server settings yourself, forward this page and your report to whoever manages your website, or ask us to do it.