SSL/TLS - Keyless SSL supports TLS 1.3 with ECDSA certificates
- Announced
- Tags
- SSL-TLS
- Severity
- info, set by
reef/rss-rule-v1 - Source
- https://developers.cloudflare.com/changelog/post/2026-10-30-keyless-ssl-tls13-ecdsa/
<p><a href="https://developers.cloudflare.com/ssl/keyless-ssl/">Keyless SSL</a> supports TLS 1.3 for ECDSA certificates. When <a href="https://developers.cloudflare.com/ssl/edge-certificates/additional-options/tls-13/">TLS 1.3</a> is enabled on your zone, visitors connecting to a hostname that serves a Keyless ECDSA certificate negotiate TLS 1.3, and your private keys stay on your own key server.</p> <p>Keyless SSL connections that use RSA certificates continue to negotiate up to TLS 1.2.</p> <p>For details, refer to the <a href="https://developers.cloudflare.com/ssl/keyless-ssl/#limitations">Keyless SSL limitations</a>.</p>
The text above is the source's. reef added the severity, the dates it could read from the text, and the endpoints and scopes named in code.