Protocol Version Matrix

Check supported TLS/SSL protocol versions

Domain

Port

Results

About

The Protocol Version Matrix shows which TLS and SSL protocol versions are supported by your server, along with their security status and client compatibility. It provides a clear view of TLS 1.3, TLS 1.2, TLS 1.1, TLS 1.0, SSL 3.0, and SSL 2.0 support with color-coded security ratings.

This matrix helps you understand the security implications of your protocol configuration and plan protocol deprecation strategies. It shows which client populations would be affected by disabling older protocols, helping you make informed decisions about security versus compatibility.

How to Use

1Enter the domain name you want to analyze
2Click "Check Protocol Versions" to scan all supported protocols
3Review the matrix showing supported/unsupported versions with security ratings
4Use the compatibility data to plan protocol deprecation if needed

Use Cases

•Security Assessment:** Quickly identify which protocol versions are enabled and their security implications

•Deprecation Planning:** Understand which clients would be affected by disabling TLS 1.0 or 1.1

•Compliance Verification:** Verify that only approved protocol versions are enabled for PCI DSS, NIST, or HIPAA

•Compatibility Testing:** Check protocol support across different client types and browsers

•Migration Monitoring:** Track protocol support changes during server upgrades or configuration updates

Tips & Best Practices

•Disable TLS 1.0 and 1.1 unless you have specific legacy client requirements

•TLS 1.3 should be preferred for its security and performance improvements

•Monitor client traffic to understand what percentage of users still need older protocols

•Plan protocol deprecation with advance notice to affected users

Technical Details

●Protocols Tested: TLS 1.3, TLS 1.2, TLS 1.1, TLS 1.0, SSL 3.0, SSL 2.0

●Security Ratings: Secure (TLS 1.3), Strong (TLS 1.2), Deprecated (TLS 1.1/1.0), Insecure (SSL 3.0/2.0)

●Client Data:** Browser and OS compatibility matrix for each protocol version

●NIST Compliance:** Comparison against NIST SP 800-52 Rev 2 protocol requirements

Frequently Asked Questions

For most modern websites, yes. TLS 1.0 and 1.1 are deprecated by all major browsers and have known vulnerabilities. However, if you have legacy clients (older Android devices, older Windows systems), check your traffic analytics first. If less than 1% of traffic uses these protocols, the security benefit of disabling them outweighs the compatibility cost.

TLS 1.3 reduces the handshake from 2 round trips to 1, removes weak cipher suites (RC4, 3DES, AES-CBC), requires forward secrecy, and simplifies the protocol. It is both faster and more secure than TLS 1.2. All modern browsers support TLS 1.3.

TLS 1.3 support depends on your TLS library version. OpenSSL 1.1.1+ supports TLS 1.3. For Nginx, add TLSv1.3 to ssl_protocols. For Apache, add -all +TLSv1.3 to SSLProtocol. For HAProxy, set ssl-min-version TLSv1.3. Restart the server after configuration changes.

Related Tools

TLS Version Checker Protocol Analyzer Protocol Features Protocol Matrix SSL Hardening Emerging Protocols