Do we still allow TLS 1.0 or 1.1?

Enter your domain. For each host we show whether it accepts TLS 1.3, TLS 1.2 and the legacy versions 1.0 and 1.1.

What this checks

TLS 1.3 and 1.2 support on each host.
Whether TLS 1.0 or 1.1 is still accepted.

What it can't see

Versions used behind your CDN or load balancer.
Some legacy versions can't be tested from every network; those show as unknown.

Questions

Why does TLS 1.3 matter for post-quantum?

Hybrid post-quantum key exchange (X25519MLKEM768) is defined for TLS 1.3 only. A host without TLS 1.3 can't offer it.

Should I turn off TLS 1.0 and 1.1?

Yes. Browsers removed them years ago, and they cap our grade at B.