Cloudflare cipher order does not follow recommendations
I just checked a domain which is running via Cloudflare CDN for security best practices.
Unfortunately, the cipher order is wrong because older ciphers come before better ciphers.
So, I thought maybe it's because we have not done it in the right way.
Cloudflare itself is probably doing it right for their own domain.
But it's not the case, Cloudflare has the wrong cipher order also for their own domain:
https://internet.nl/site/www.cloudflare.com/3455112/#sitetls
How can this be changed?
Unfortunately, the cipher order is wrong because older ciphers come before better ciphers.
So, I thought maybe it's because we have not done it in the right way.
Cloudflare itself is probably doing it right for their own domain.
But it's not the case, Cloudflare has the wrong cipher order also for their own domain:
https://internet.nl/site/www.cloudflare.com/3455112/#sitetls
How can this be changed?
Test for modern Internet Standards IPv6, DNSSEC, HTTPS, HSTS, DMARC, DKIM, SPF, STARTTLS, DANE, RPKI and security.txt
