HTTPS and TLS
type: TechArticle
description: Serve every page over HTTPS using TLS 1.2 or 1.3, redirect plain HTTP to HTTPS, and disable obsolete SSL and early TLS versions on every host you control.
language: en
is part of: Web Specification Studio
author: Web Specification Studio
publisher: Web Specification Studio
license: https://creativecommons.org/licenses/by/4.0/
date modified: 2026-07-17T00:00:00.000Z
citation: RFC 9846 — The Transport Layer Security (TLS) Protocol Version 1.3
  type: CreativeWork
  publisher: IETF
citation: RFC 9851 — TLS 1.2 is in Feature Freeze
  type: CreativeWork
  publisher: IETF
citation: Mozilla SSL Configuration Generator
  type: CreativeWork
  publisher: Mozilla
citation: MDN — Transport Layer Security
  type: CreativeWork
  publisher: MDN
citation: Qualys SSL Labs Server Test
  type: CreativeWork
  publisher: Qualys

Web Specification Studio
type: WebSite

Web Specification Studio
type: Organization

breadcrumb
type: BreadcrumbList
item list element: Home
  type: ListItem
  position: 1
  item: https://webspecification.com/
item list element: Spec
  type: ListItem
  position: 2
  item: https://webspecification.com/spec/
item list element: Security
  type: ListItem
  position: 3
  item: https://webspecification.com/spec/security/
item list element: HTTPS and TLS
  type: ListItem
  position: 4
  item: https://webspecification.com/spec/security/https-tls/