Skip to content
Docs
CtrlK
Go to Dashboard
SSL/TLS & Data Shield

Set modern HTTPS encryption standards, choose strict cipher suites, and verify with live TLS probing

Modern web visitors expect the padlock icon in their browser bar and complete privacy when entering passwords or credit cards. Outdated encryption protocols (like SSL 3.0 or TLS 1.0) have known security flaws and can cause browsers to show security warning popups to your customers. WebOptiva makes it easy to enforce the highest modern encryption standards with a single switch.

SSL/TLS and Data Shield screen showing Minimum TLS version buttons, the Strict Modern Cipher Suites toggle, the HSTS Preload Readiness badge, and the live TLS handshake probe
Enforce modern TLS versions, strict cipher suites, and outbound secret scrubbing on the SSL/TLS & Data Shield tab.

Choosing your encryption baseline#

  • TLS 1.2 (Recommended): The industry standard for e-commerce and business websites. Provides top-tier security while remaining 100% compatible with all modern smartphones, laptops, and older operating systems.
  • TLS 1.3 (Strict): The fastest and most secure protocol available. Perfect for high-security applications, although a few very old devices from a decade ago may not support it.
  • HSTS Preload Readiness: WebOptiva reports whether your domain meets the 1-year max-age requirement for HSTS preload, showing Preload Ready (1 Year HSTS) or Standard HSTS (6 Months).

Step-by-step: how to configure SSL & HTTPS#

  1. In Security operations, click the SSL/TLS & Data Shield tab in the sub-navigation bar.
  2. Select your website domain name from the dropdown at the top.
  3. Under Edge TLS Security Profile & Ciphers, choose the Minimum TLS Protocol Version: TLS 1.2 (Recommended) for standard production sites or TLS 1.3 (Strict) for maximum security.
  4. Review Strict Modern Cipher Suites. Keep it Enabled (Strict) to reject legacy ciphers, or set it to Disabled (Permissive) only if you must support an old client.
  5. Check the HSTS Preload Readiness badge. It shows Preload Ready (1 Year HSTS) or Standard HSTS (6 Months) based on your current HSTS max-age.
  6. Click the Run Live TLS Handshake Probe button. WebOptiva tests your active certificate, verified hostnames, and cipher negotiation at the edge.
  7. Review the probe result card to confirm the certificate and cipher status.
  8. Click Save Draft, then click Deploy changes to push your settings live across all global network locations.

Expected result#

An A+ grade on public SSL security tests, immediate protection against protocol downgrade attacks, and a secure browsing experience that builds customer trust.

Back to SSL/TLS & Data Shield