Website server configuration TLS1.3 tutorial to make your website support the latest TLS1.3 transmission protocol

The development of TLS has a history of more than 20 years. In previous versions, TLS 1.2 was highly configurable for better compatibility with older browsers, which meant that vulnerable sites were always running. Insecure encryption algorithms give Internet hackers an opportunity. TLS 1.3 removes unsafe encryption algorithms based on previous versions. What I bring to you this time is the latest TLS1.3 configuration tutorial.

1. Benefits of TLS1.3

• Faster access speed
• Stronger security

2. Configuration tutorial

Pagoda panel user configuration is very simple! Pagoda NGINX1.15 and later versions support the TLS 1.3 protocol. Just modify the website configuration file to the following content

ssl_protocols TLSv1.2 TLSv1.3; ssl_ciphers TLS13-AES-256-GCM-SHA384:TLS13-CHACHA20-POLY1305-SHA256:TLS13-AES-128-GCM-SHA256:TLS13-AES-128-CCM-8-SHA256:TLS13-AES-128-CCM-SHA256 :EECDH+CHACHA20:EECDH+CHACHA20-draft:EECDH+ECDSA+AES128:EECDH+aRSA+AES128:RSA+AES128:EECDH+ECDSA+AES256:EECDH+aRSA+AES256:RSA+AES256:EECDH+ECDSA+3DES:EECDH +aRSA+3DES:RSA+3DES:!MD5;

3. Other instructions

• At present, the latest Chrome and Firefox browsers support the TLS 1.3 protocol, but it needs to be turned on manually. In Chrome, the Maximum TLS version enabled in chrome://flags/ needs to be changed to TLS 1.3. In Chrome 62, TLS 1.3 needs to be changed. Just change it to Enabled (Draft).
• In Firefox, change security.tls.version.max in about:config to 4

Recommended site searches: ip query, registered domain name mainland China site group server, US host network, Hong Kong vps host rental, free host, ftp space, Ministry of Industry and Information Technology icp registration, domain name resolution ip address query host discount code,