Security/Server Side TLS - Revision history

Gene wood: Indicating new locations for the Server Side TLS page

2026-06-11T23:17:09Z

Indicating new locations for the Server Side TLS page

Gene wood: add note about AES-CCM ciphers to rationale https://github.com/mozilla/server-side-tls/issues/279

2026-04-29T21:22:08Z

add note about AES-CCM ciphers to rationale https://github.com/mozilla/server-side-tls/issues/279

← Older revision		Revision as of 21:22, 29 April 2026
Line 121:		Line 121:
	** Administrators needing to provide access to [https://www.ssllabs.com/ssltest/viewClient.html?name=IE&version=11&platform=Win%207&key=36 IE 11 on Windows Server 2008 R2] and who are unable to switch to or add ECDSA certificates can add <tt>TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA</tt>		** Administrators needing to provide access to [https://www.ssllabs.com/ssltest/viewClient.html?name=IE&version=11&platform=Win%207&key=36 IE 11 on Windows Server 2008 R2] and who are unable to switch to or add ECDSA certificates can add <tt>TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA</tt>
	** While the goal is to support a broad range of clients, we reasonably disable a number of ciphers that have little support (such as ARIA, Camellia, 3DES, and SEED)		** While the goal is to support a broad range of clients, we reasonably disable a number of ciphers that have little support (such as ARIA, Camellia, 3DES, and SEED)
			** Admins may consider amending this cipher list with [https://github.com/mozilla/server-side-tls/issues/279 AES-CCM ciphers] with full 16-byte tag for embedded systems with low-power ICs lacking crypto acceleration
	** 90 days is the recommended maximum certificate lifespan, to encourage certificate issuance automation		** 90 days is the recommended maximum certificate lifespan, to encourage certificate issuance automation

Line 145:		Line 146:
	\| style="text-align: center;" \| Glenn Strauss		\| style="text-align: center;" \| Glenn Strauss
	\| Remove kDHE ciphers from Intermediate and Old		\| Remove kDHE ciphers from Intermediate and Old
	Change Old dhParamSize from 1024 to 2048		Change Old dhParamSize from 1024 to 2048
	Change Old to use ffdhe2048 instead of locally generated dhparams		Change Old to use ffdhe2048 instead of locally generated dhparams
	Prepend X25519MLKEM768 PQC hybrid KEM to recommended groups		Prepend X25519MLKEM768 PQC hybrid KEM to recommended groups
	\|-		\|-
	\| style="text-align: center;" \| 5.7		\| style="text-align: center;" \| 5.7

Gene wood: Remove link to old guidelines per https://github.com/mozilla/server-side-tls/pull/310

2026-04-29T20:52:42Z

Remove link to old guidelines per https://github.com/mozilla/server-side-tls/pull/310

← Older revision		Revision as of 20:52, 29 April 2026
Line 7:		Line 7:

	Updates to this page should be submitted to the [https://github.com/mozilla/server-side-tls server-side-tls] repository on GitHub. Issues related to the [https://ssl-config.mozilla.org configuration generator] are maintained in their own [https://github.com/mozilla/ssl-config-generator GitHub repository].		Updates to this page should be submitted to the [https://github.com/mozilla/server-side-tls server-side-tls] repository on GitHub. Issues related to the [https://ssl-config.mozilla.org configuration generator] are maintained in their own [https://github.com/mozilla/ssl-config-generator GitHub repository].

	~~In the interests of usability and maintainability, these guidelines have been considerably simplified from the [[Security/Archive/Server Side TLS 4.0\|previous guidelines]].~~
	</td>		</td>
	</tr>		</tr>

Gene wood: Update screenshot to 2026 version

2026-04-29T20:46:50Z

Update screenshot to 2026 version

← Older revision		Revision as of 20:46, 29 April 2026
Line 16:		Line 16:

	<span style="float: right; max-width: 600px; text-align: center;">		<span style="float: right; max-width: 600px; text-align: center;">
	[[Image:Ssl-config.mozilla.org.png\|600px\|link=https://ssl-config.mozilla.org/\|Mozilla SSL Configuration Generator]]<br>		[[Image:Ssl-config.mozilla.org-2026.png\|600px\|link=https://ssl-config.mozilla.org/\|Mozilla SSL Configuration Generator]]<br>
	The [https://ssl-config.mozilla.org/ Mozilla SSL Configuration Generator]		The [https://ssl-config.mozilla.org/ Mozilla SSL Configuration Generator]
	</span>		</span>
Line 63:		Line 63:

	<p style="max-width: 60em;">Different libraries support different cipher suites and refer to them by different names. Mozilla maintains a list of [[Security/Cipher Suites\|all known cipher suites]] and their corresponding names.</p>		<p style="max-width: 60em;">Different libraries support different cipher suites and refer to them by different names. Mozilla maintains a list of [[Security/Cipher Suites\|all known cipher suites]] and their corresponding names.</p>
	~~<br style="clear: right;">~~

	== <span style="color:green;">'''Modern'''</span> compatibility ==		== <span style="color:green;">'''Modern'''</span> compatibility ==
Line 125:		Line 124:
	** While the goal is to support a broad range of clients, we reasonably disable a number of ciphers that have little support (such as ARIA, Camellia, 3DES, and SEED)		** While the goal is to support a broad range of clients, we reasonably disable a number of ciphers that have little support (such as ARIA, Camellia, 3DES, and SEED)
	** 90 days is the recommended maximum certificate lifespan, to encourage certificate issuance automation		** 90 days is the recommended maximum certificate lifespan, to encourage certificate issuance automation

			<br style="clear: right;">

	= JSON version of the recommendations =		= JSON version of the recommendations =

Gene wood: Adding a line to trigger rebuilding the page to accommodate the changed embedded image resolution

2026-04-29T20:42:27Z

Adding a line to trigger rebuilding the page to accommodate the changed embedded image resolution

← Older revision		Revision as of 20:42, 29 April 2026
Line 14:		Line 14:

	= Recommended configurations =		= Recommended configurations =

	<span style="float: right; max-width: 600px; text-align: center;">		<span style="float: right; max-width: 600px; text-align: center;">
	[[Image:Ssl-config.mozilla.org.png\|600px\|link=https://ssl-config.mozilla.org/\|Mozilla SSL Configuration Generator]]<br>		[[Image:Ssl-config.mozilla.org.png\|600px\|link=https://ssl-config.mozilla.org/\|Mozilla SSL Configuration Generator]]<br>

Gene wood: Publishing https://github.com/mozilla/server-side-tls/pull/300

2026-04-06T15:56:22Z

Publishing https://github.com/mozilla/server-side-tls/pull/300

Show changes

Gene wood: Deploying https://github.com/mozilla/server-side-tls/pull/296

2025-01-20T17:25:18Z

Deploying https://github.com/mozilla/server-side-tls/pull/296

← Older revision		Revision as of 17:25, 20 January 2025
Line 74:		Line 74:

	<p style="max-width: 60em;">OpenSSL will ignore cipher suites it doesn't understand, so always use the full set of cipher suites below, in their recommended order. The use of the <span style="color: gray; font-weight: bold;">Old</span> configuration with modern versions of OpenSSL may require custom builds with support for deprecated ciphers.</p>		<p style="max-width: 60em;">OpenSSL will ignore cipher suites it doesn't understand, so always use the full set of cipher suites below, in their recommended order. The use of the <span style="color: gray; font-weight: bold;">Old</span> configuration with modern versions of OpenSSL may require custom builds with support for deprecated ciphers.</p>

			<p style="max-width: 60em;">Different libraries support different cipher suites and refer to them by different names. Mozilla maintains a list of [[Security/Cipher Suites\|all known cipher suites]] and their corresponding names.</p>
	<br style="clear: right;">		<br style="clear: right;">

Line 89:		Line 91:

	<!-- This tabular openssl list can be produced by running "openssl ciphers -V" -->		<!-- This tabular openssl list can be produced by running "openssl ciphers -V" -->
	<~~source~~>		<pre>
	0x13,0x01 - TLS_AES_128_GCM_SHA256 TLSv1.3 Kx=any Au=any Enc=AESGCM(128) Mac=AEAD		0x13,0x01 - TLS_AES_128_GCM_SHA256 TLSv1.3 Kx=any Au=any Enc=AESGCM(128) Mac=AEAD
	0x13,0x02 - TLS_AES_256_GCM_SHA384 TLSv1.3 Kx=any Au=any Enc=AESGCM(256) Mac=AEAD		0x13,0x02 - TLS_AES_256_GCM_SHA384 TLSv1.3 Kx=any Au=any Enc=AESGCM(256) Mac=AEAD
	0x13,0x03 - TLS_CHACHA20_POLY1305_SHA256 TLSv1.3 Kx=any Au=any Enc=CHACHA20/POLY1305(256) Mac=AEAD		0x13,0x03 - TLS_CHACHA20_POLY1305_SHA256 TLSv1.3 Kx=any Au=any Enc=CHACHA20/POLY1305(256) Mac=AEAD
	</~~source~~>		</pre>

	* Rationale:		* Rationale:
Line 114:		Line 116:

	<!-- This tabular openssl list can be produced by running "openssl ciphers -V" -->		<!-- This tabular openssl list can be produced by running "openssl ciphers -V" -->
	<~~source~~>		<pre>
	0x13,0x01 - TLS_AES_128_GCM_SHA256 TLSv1.3 Kx=any Au=any Enc=AESGCM(128) Mac=AEAD		0x13,0x01 - TLS_AES_128_GCM_SHA256 TLSv1.3 Kx=any Au=any Enc=AESGCM(128) Mac=AEAD
	0x13,0x02 - TLS_AES_256_GCM_SHA384 TLSv1.3 Kx=any Au=any Enc=AESGCM(256) Mac=AEAD		0x13,0x02 - TLS_AES_256_GCM_SHA384 TLSv1.3 Kx=any Au=any Enc=AESGCM(256) Mac=AEAD
Line 127:		Line 129:
	0x00,0x9F - DHE-RSA-AES256-GCM-SHA384 TLSv1.2 Kx=DH Au=RSA Enc=AESGCM(256) Mac=AEAD		0x00,0x9F - DHE-RSA-AES256-GCM-SHA384 TLSv1.2 Kx=DH Au=RSA Enc=AESGCM(256) Mac=AEAD
	0xCC,0xAA - DHE-RSA-CHACHA20-POLY1305 TLSv1.2 Kx=DH Au=RSA Enc=CHACHA20/POLY1305(256) Mac=AEAD		0xCC,0xAA - DHE-RSA-CHACHA20-POLY1305 TLSv1.2 Kx=DH Au=RSA Enc=CHACHA20/POLY1305(256) Mac=AEAD
	</~~source~~>		</pre>

	* Rationale:		* Rationale:
Line 155:		Line 157:

	<!-- This tabular openssl list can be produced by running "openssl ciphers -V" -->		<!-- This tabular openssl list can be produced by running "openssl ciphers -V" -->
	<~~source~~>		<pre>
	0x13,0x01 - TLS_AES_128_GCM_SHA256 TLSv1.3 Kx=any Au=any Enc=AESGCM(128) Mac=AEAD		0x13,0x01 - TLS_AES_128_GCM_SHA256 TLSv1.3 Kx=any Au=any Enc=AESGCM(128) Mac=AEAD
	0x13,0x02 - TLS_AES_256_GCM_SHA384 TLSv1.3 Kx=any Au=any Enc=AESGCM(256) Mac=AEAD		0x13,0x02 - TLS_AES_256_GCM_SHA384 TLSv1.3 Kx=any Au=any Enc=AESGCM(256) Mac=AEAD
Line 185:		Line 187:
	0x00,0x35 - AES256-SHA SSLv3 Kx=RSA Au=RSA Enc=AES(256) Mac=SHA1		0x00,0x35 - AES256-SHA SSLv3 Kx=RSA Au=RSA Enc=AES(256) Mac=SHA1
	0x00,0x0A - DES-CBC3-SHA SSLv3 Kx=RSA Au=RSA Enc=3DES(168) Mac=SHA1		0x00,0x0A - DES-CBC3-SHA SSLv3 Kx=RSA Au=RSA Enc=3DES(168) Mac=SHA1
	</~~source~~>		</pre>

	* Rationale:		* Rationale:

Gene wood: Update to commit 7a81eec5519983e1408cafe4936b4f85ae6a0997

2023-05-16T22:47:46Z

Update to commit 7a81eec5519983e1408cafe4936b4f85ae6a0997

← Older revision		Revision as of 22:47, 16 May 2023
Line 88:		Line 88:
	* Cipher preference: '''client chooses'''		* Cipher preference: '''client chooses'''

			<!-- This tabular openssl list can be produced by running "openssl ciphers -V" -->
	<source>		<source>
	0x13,0x01 - TLS_AES_128_GCM_SHA256 TLSv1.3 Kx=any Au=any Enc=AESGCM(128) Mac=AEAD		0x13,0x01 - TLS_AES_128_GCM_SHA256 TLSv1.3 Kx=any Au=any Enc=AESGCM(128) Mac=AEAD
Line 103:		Line 104:

	* Cipher suites (TLS 1.3): '''TLS_AES_128_GCM_SHA256:TLS_AES_256_GCM_SHA384:TLS_CHACHA20_POLY1305_SHA256'''		* Cipher suites (TLS 1.3): '''TLS_AES_128_GCM_SHA256:TLS_AES_256_GCM_SHA384:TLS_CHACHA20_POLY1305_SHA256'''
	* Cipher suites (TLS 1.2): '''ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384'''		* Cipher suites (TLS 1.2): '''ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384:DHE-RSA-CHACHA20-POLY1305'''
	* Protocols: '''TLS 1.2, TLS 1.3'''		* Protocols: '''TLS 1.2, TLS 1.3'''
	* TLS curves: '''X25519, prime256v1, secp384r1'''		* TLS curves: '''X25519, prime256v1, secp384r1'''
Line 112:		Line 113:
	* Cipher preference: '''client chooses'''		* Cipher preference: '''client chooses'''

			<!-- This tabular openssl list can be produced by running "openssl ciphers -V" -->
	<source>		<source>
	0x13,0x01 - TLS_AES_128_GCM_SHA256 TLSv1.3 Kx=any Au=any Enc=AESGCM(128) Mac=AEAD		0x13,0x01 - TLS_AES_128_GCM_SHA256 TLSv1.3 Kx=any Au=any Enc=AESGCM(128) Mac=AEAD
Line 124:		Line 126:
	0x00,0x9E - DHE-RSA-AES128-GCM-SHA256 TLSv1.2 Kx=DH Au=RSA Enc=AESGCM(128) Mac=AEAD		0x00,0x9E - DHE-RSA-AES128-GCM-SHA256 TLSv1.2 Kx=DH Au=RSA Enc=AESGCM(128) Mac=AEAD
	0x00,0x9F - DHE-RSA-AES256-GCM-SHA384 TLSv1.2 Kx=DH Au=RSA Enc=AESGCM(256) Mac=AEAD		0x00,0x9F - DHE-RSA-AES256-GCM-SHA384 TLSv1.2 Kx=DH Au=RSA Enc=AESGCM(256) Mac=AEAD
			0xCC,0xAA - DHE-RSA-CHACHA20-POLY1305 TLSv1.2 Kx=DH Au=RSA Enc=CHACHA20/POLY1305(256) Mac=AEAD
	</source>		</source>

Line 151:		Line 154:
	* Cipher preference: '''server chooses'''		* Cipher preference: '''server chooses'''

			<!-- This tabular openssl list can be produced by running "openssl ciphers -V" -->
	<source>		<source>
	0x13,0x01 - TLS_AES_128_GCM_SHA256 TLSv1.3 Kx=any Au=any Enc=AESGCM(128) Mac=AEAD		0x13,0x01 - TLS_AES_128_GCM_SHA256 TLSv1.3 Kx=any Au=any Enc=AESGCM(128) Mac=AEAD
Line 192:		Line 196:
	= JSON version of the recommendations =		= JSON version of the recommendations =

	<p style="max-width: 60em;">Mozilla also maintains [https://ssl-config.mozilla.org/guidelines/5.6.json these recommendations] in JSON format, for automated system configuration. This location is versioned and permanent, and can be referenced in scripts and tools. The file will not change, to avoid breaking tools when we update the recommendations.</p>		<p style="max-width: 60em;">Mozilla also maintains [https://ssl-config.mozilla.org/guidelines/5.7.json these recommendations] in JSON format, for automated system configuration. This location is versioned and permanent, and can be referenced in scripts and tools. The file will not change, to avoid breaking tools when we update the recommendations.</p>

	<p style="max-width: 60em;">We also maintain a [https://ssl-config.mozilla.org/guidelines/latest.json rolling version] of these recommendations, with the caveat that they may change '''without warning''' and '''without providing backwards compatibility'''. As it may break things if you use it to automatically configure your servers without review, we recommend you use the [https://ssl-config.mozilla.org/guidelines/5.6.json version-specific file] instead.</p>		<p style="max-width: 60em;">We also maintain a [https://ssl-config.mozilla.org/guidelines/latest.json rolling version] of these recommendations, with the caveat that they may change '''without warning''' and '''without providing backwards compatibility'''. As it may break things if you use it to automatically configure your servers without review, we recommend you use the [https://ssl-config.mozilla.org/guidelines/5.7.json version-specific file] instead.</p>

	= Version History =		= Version History =
Line 202:		Line 206:
	! Editor		! Editor
	! Changes		! Changes
			\|-
			\| style="text-align: center;" \| 5.7
			\| style="text-align: center;" \| Gene Wood
			\| Add DHE-RSA-CHACHA20-POLY1305 cipher to the Intermediate configuration
			\|-
			\| style="text-align: center;" \| 5.6
			\| style="text-align: center;" \| April King
			\| Fixed incorrect cipher ordering for the Intermediate configuration
	\|-		\|-
	\| style="text-align: center;" \| 5.5		\| style="text-align: center;" \| 5.5

Mlarsonweber: Removed ambiguous punctuation from paragraph about intermediate compatibility

2022-04-01T18:05:47Z

Removed ambiguous punctuation from paragraph about intermediate compatibility

← Older revision		Revision as of 18:05, 1 April 2022
Line 100:		Line 100:

	== <span style="color:orange;">'''Intermediate'''</span> compatibility (recommended) ==		== <span style="color:orange;">'''Intermediate'''</span> compatibility (recommended) ==
	<p style="max-width: 60em;">For services that don't need compatibility with legacy clients, such as Windows XP or old versions of OpenSSL. This is the recommended configuration for the vast majority of services, as it is highly secure and compatible with nearly every client released in the last five (or more) years.</p>		<p style="max-width: 60em;">For services that don't need compatibility with legacy clients such as Windows XP or old versions of OpenSSL. This is the recommended configuration for the vast majority of services, as it is highly secure and compatible with nearly every client released in the last five (or more) years.</p>

	* Cipher suites (TLS 1.3): '''TLS_AES_128_GCM_SHA256:TLS_AES_256_GCM_SHA384:TLS_CHACHA20_POLY1305_SHA256'''		* Cipher suites (TLS 1.3): '''TLS_AES_128_GCM_SHA256:TLS_AES_256_GCM_SHA384:TLS_CHACHA20_POLY1305_SHA256'''

Apking: Fix pointer to latest JSON file

2020-07-24T17:48:21Z

Fix pointer to latest JSON file

← Older revision		Revision as of 17:48, 24 July 2020
Line 192:		Line 192:
	= JSON version of the recommendations =		= JSON version of the recommendations =

	<p style="max-width: 60em;">Mozilla also maintains [https://ssl-config.mozilla.org/guidelines/5.3.json these recommendations] in JSON format, for automated system configuration. This location is versioned and permanent, and can be referenced in scripts and tools. The file will not change, to avoid breaking tools when we update the recommendations.</p>		<p style="max-width: 60em;">Mozilla also maintains [https://ssl-config.mozilla.org/guidelines/5.6.json these recommendations] in JSON format, for automated system configuration. This location is versioned and permanent, and can be referenced in scripts and tools. The file will not change, to avoid breaking tools when we update the recommendations.</p>

	<p style="max-width: 60em;">We also maintain a [https://ssl-config.mozilla.org/guidelines/latest.json rolling version] of these recommendations, with the caveat that they may change '''without warning''' and '''without providing backwards compatibility'''. As it may break things if you use it to automatically configure your servers without review, we recommend you use the [https://ssl-config.mozilla.org/guidelines/5.3.json version-specific file] instead.</p>		<p style="max-width: 60em;">We also maintain a [https://ssl-config.mozilla.org/guidelines/latest.json rolling version] of these recommendations, with the caveat that they may change '''without warning''' and '''without providing backwards compatibility'''. As it may break things if you use it to automatically configure your servers without review, we recommend you use the [https://ssl-config.mozilla.org/guidelines/5.6.json version-specific file] instead.</p>

	= Version History =		= Version History =