Sign inConnect your agent
infochanged

SSL/TLS - Keyless SSL supports TLS 1.3 with ECDSA certificates

Announced
Tags
SSL-TLS
Severity
info, set by reef/rss-rule-v1
Source
https://developers.cloudflare.com/changelog/post/2026-10-30-keyless-ssl-tls13-ecdsa/

<p><a href="https://developers.cloudflare.com/ssl/keyless-ssl/">Keyless SSL</a> supports TLS 1.3 for ECDSA certificates. When <a href="https://developers.cloudflare.com/ssl/edge-certificates/additional-options/tls-13/">TLS 1.3</a> is enabled on your zone, visitors connecting to a hostname that serves a Keyless ECDSA certificate negotiate TLS 1.3, and your private keys stay on your own key server.</p> <p>Keyless SSL connections that use RSA certificates continue to negotiate up to TLS 1.2.</p> <p>For details, refer to the <a href="https://developers.cloudflare.com/ssl/keyless-ssl/#limitations">Keyless SSL limitations</a>.</p>

The text above is the source's. reef added the severity, the dates it could read from the text, and the endpoints and scopes named in code.