FALKEN'S MAZE / CHECKS / LEGACY TLS VERSIONS

Legacy TLS versions

What Joshua checks

Checks whether TLS 1.0 or 1.1 are still enabled.

Why it matters

Old TLS versions have known weaknesses and fail PCI compliance.

How to fix it

Disable TLS 1.0 and 1.1 in your web server or CDN settings.

In the Maze Score

Worth

10 points (half for a warning)

Severity

Medium

Runs on

Every scan, including the free report card

Related checks

• Certificate validityFree
• Certificate expiryFree
• HSTSFree
• HTTP redirects to HTTPSFree
• Mixed contentFree
• Cipher suitesPro (Watchtower)