Gulf CybersecurityBaseline
العربيةCheck your domain
Kuwait City at night from space, its streets in amber light along the dark water of the bayRiyadh at night from space, a wide grid of white and amber light in the desertDubai at night from space, with Palm Jumeirah lit in the sea below the coast roadDoha at night from space, the city's lights spreading from the bay along its roadsBahrain at night from space, the island's towns joined by lit roads in a dark seaMuscat and Al Seeb at night from space, the coast road and the airport in amber light beside a dark sea

No TLS 1.0 or 1.1

Old TLS switched off (1.0 and 1.1)

Does the site still accept TLS 1.0 or 1.1?

Why it matters

TLS 1.0 and 1.1 were formally deprecated in 2021 because their cryptography no longer holds up. Leaving them on lets an attacker push a connection down to them.

When a domain passes

Passes when the server refuses both TLS 1.0 and TLS 1.1.

How to fix it

  1. Set the minimum protocol to TLS 1.2 on every server and CDN in front of the site.

Reference specifications

All thirteen standards