Ravi Sir's Cyber Security Cards › Revision Cards
Checking and Hardening Your TLS Setup
Checking and Hardening Your TLS Setup Checking that your HTTPS setup uses only strong, modern settings. Old protocols ( SSLv3, TLS 1.0, TLS 1.1 ) have known weaknesses. Every scanner flags them. Allow only TLS 1.2 and 1.3. Use SSL Labs (ssllabs.com/ssltest), only on your own domain. Turning on HSTS
Read card text
What this card says
What it is
Checking that your HTTPS setup uses only strong, modern settings.
Why it matters for security
Old protocols (SSLv3, TLS 1.0, TLS 1.1) have known weaknesses. Every scanner flags them.
Allow only TLS 1.2 and 1.3.
Check
Use SSL Labs (ssllabs.com/ssltest), only on your own domain.
Common mistake
Turning on HSTS with includeSubDomains while a subdomain is still on HTTP. That subdomain stops working in browsers.
| Check | Good result |
|---|---|
| Protocols | Only TLS 1.2 and 1.3 |
| Certificate | Matches the domain, not expired, full chain |
| Redirect | HTTP → HTTPS with 301 |
| HSTS header | Present, after you are sure HTTPS works everywhere |
Learn more in the lesson: 13.5 Checking and Hardening Your TLS Setup