Serve every page over HTTPS using TLS 1.2 or 1.3, redirect plain HTTP to HTTPS, and disable obsolete SSL and early TLS versions on every host you control.
RFC 9846 — The Transport Layer Security (TLS) Protocol Version 1.3