What it reads
Real handshakes with your web server: the versions it accepts, including a direct try of TLS 1.0 and 1.1. It also checks that the cipher it chooses has forward secrecy.
Check 17 of 54 · Web and TLS
TLS versions, explained.
Your site uses modern encryption, with the old broken versions switched off.
Engine 1.57.0, read 25 October 2026
Free checkScoredReliability: Definitive
Is your website set up safely?
What the check does, and where it stops.
Why it matters
TLS 1.0 and 1.1 have known weaknesses and browsers have dropped them. A site that still accepts them can be pushed down to them.
What a failure looks like
A failure is a finding in your result. The check is scored, so it can lower your score, and the Full Report gives every finding its severity and a fix. If the check cannot finish, it is recorded as unknown: it carries no penalty, and it is never a pass.
Where its limits are
A clean pass is only given when every handshake completed.
ReliabilityDefinitive: reads a published value
Check 17 is one of 15 in Web and TLS. See it in its row on the scanner page, beside the rest of Web and TLS.
See how your domain does.
The free check includes this one and takes about 30 seconds. No account. Nothing to install.