# How to disable TLS 1.0 and 1.1

> Old TLS versions have known weaknesses and browsers refuse them. Allow TLS 1.2 and 1.3 only.

Security · HTML version: https://getreport.app/learn/tls-versions

## Minimum TLS version

Passing looks like: The server only accepts TLS 1.2 or newer.

**Why it matters.** TLS 1.0 and 1.1 have known weaknesses and every major browser dropped them in 2020. A server that still accepts them lets an attacker downgrade a connection to one they can break.

**How to fix it.**

1. Set the minimum protocol to TLS 1.2 (nginx: ssl_protocols TLSv1.2 TLSv1.3; Apache: SSLProtocol -all +TLSv1.2 +TLSv1.3).
2. Behind Cloudflare or another CDN, set "Minimum TLS Version" to 1.2 in its dashboard.

Check your own page: https://getreport.app/