FALKEN'S MAZE / CHECKS / CIPHER SUITES
Cipher suites
What Joshua checks
Tests which outdated TLS 1.2 cipher suites the server accepts.
Why it matters
Weak ciphers can let traffic be decrypted.
How to fix it
Restrict to modern AEAD ciphers in your server or CDN configuration.
In the Maze Score
- Worth
- 5 points (half for a warning)
- Severity
- Medium
- Runs on
- Pro (Watchtower) and above
Related checks
- Certificate validityFree
- Certificate expiryFree
- Legacy TLS versionsFree
- HSTSFree
- HTTP redirects to HTTPSFree
- Mixed contentFree
How does your domain do? Scan it free and get a Maze Score in about a minute.