TLS Hardening

TLS hardening is the process of configuring a server’s TLS protocol to meet current security standards. This is accomplished by disabling obsolete protocol versions, like SSLv3 and early TLS, and selecting a specific set of strong cryptographic cipher suites.

This configuration is necessary because vulnerabilities in older protocols and ciphers are discovered over time. Without hardening, a server might negotiate a connection using a weak configuration, exposing encrypted traffic to attacks such as POODLE or BEAST. By specifying which protocols and ciphers are permitted, you ensure that connections to your server use strong encryption.

Here are our resources to help you strengthen your server’s TLS configuration.