Skip to content

[SSL] Correct Pages custom domain TLS and cipher suite guidance #34873

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
dknecht wants to merge 1 commit into
base: production
Choose a base branch
from
+2 −2
Open

[SSL] Correct Pages custom domain TLS and cipher suite guidance #34873

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
4 changes: 2 additions & 2 deletions src/content/docs/ssl/reference/compliance-and-vulnerabilities.mdx
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -163,9 +163,9 @@ The dashboard shows your configured cipher suites. The ciphers actually negotiat

## Cloudflare Pages

It is not possible to configure minimum TLS version or cipher suites for `*.pages.dev` hostnames. These settings only apply to zones you control in the Cloudflare dashboard.
It is not possible to configure minimum TLS version or cipher suites for [Cloudflare Pages](/pages/) hostnames. This includes `*.pages.dev` hostnames and Pages [custom domains](/pages/configuration/custom-domains/). A Pages custom domain is served with a certificate managed by Pages, so the Minimum TLS Version and cipher suite settings of the zone that contains the custom domain do not apply to it.

For payment pages hosted on a Pages project, use a [custom domain](/pages/configuration/custom-domains/) attached to a zone you control. Zone-level TLS and cipher suite settings apply to traffic served through that custom domain.
For payment pages that need a specific minimum TLS version or cipher suite configuration, serve the site from a Worker with a [Custom Domain](/workers/configuration/routing/custom-domains/) instead. A Workers Custom Domain uses a certificate on your zone, so your zone's TLS and cipher suite settings apply. To move an existing project, refer to [Migrate from Pages to Workers](/workers/static-assets/migration-guides/migrate-from-pages/).

## PCI DSS v4 client-side requirements

Expand Down
Loading