Feature Overview

TLS and its original edition Secure Sockets Layer (SSL) are both cryptographic protocols for ensuring the security and data integrity in Internet-based communication. The most typical application of TLS is HTTPS, which is also known as HTTP over TLS. HTTPS is the secure version of HTTP. It runs at the layer between the HTTP layer and the TCP layer to provide data encryption and decryption services for communication at the HTTP layer.

eSurfing Cloud CDN provides the TLS version control feature. You can configure different TLS versions for different accelerated domain names as needed. Earlier TLS versions support earlier versions of browsers. However, earlier TLS versions provide less security strength. Later TLS versions provide higher security strength, but are less compatible with earlier versions of browsers.

eSurfing Cloud CDN supports TLS 1.0, TLS 1.1, TLS 1.2, TLS 1.3. The following table describes the browsers that are supported by the TLS versions.

Protocol	Description	Supported Mainstream Browsers
TLSv1.0	TLS 1.0 is defined in RFC 2246 released in 1999. This version was developed based on SSL 3.0 and is vulnerable to attacks such as POODLE and BEAST. In addition, it provides relatively weak encryption, resulting in inadequate protection capabilities for the modern network connection security. Therefore, it does not meet the requirements of Payment Card Industry (PCI) Data Security Standards (DSS).	IE6+ Chrome 1+ Firefox 2+
TLSv1.1	TLS 1.1 is defined in RFC 4346 released in 2006. TLS 1.1 fixes multiple bugs in TLS 1.0.	IE 11+ Chrome 22+ Firefox 24+ Safari 7+
TLSv1.2	TLS 1.2 is defined in RFC 5246 released in 2008. Currently, this is the widely used TLS version.	IE 11+ Chrome 30+ Firefox 27+ Safari 7+
TLSv1.3	TLS 1.3 is defined in RFC 8446 released in 2018. It is the latest TLS version. It supports the 0-RTT mode for faster computing and supports only key exchange algorithms for perfect forward secrecy to provide higher security strength.	Chrome 70+ Firefox 63+

Additional Considerations

Before you configure TLS versions, you must upload your HTTPS certificate to eSurfing Cloud CDN. For more information, see Add new Certificate.
By default, TLS 1.0, TLS 1.1, TLS 1.2, and TLS 1.3 are enabled.
You cannot disable all TLS versions because HTTPS requests will fail if all TLS versions are disabled.

Procedure

Log in to the CDN console.
Go to Domain Management -> Domain List.
On the Domain Names page, find the target domain name, and click Edit in the Actions column.
Click HTTPS .
Turn on the HTTPS switch.
Select certificate.
Select TLS version.
Click Save and submit.

Content Delivery Network

TLS version configuration