Introduction

This article explains how to ensure that outgoing web calls from applications running in Mendix Cloud use TLS 1.3 and how to verify the TLS version being used.

Environment

Applications hosted in Mendix Cloud

Instructions/Procedure

Mendix Cloud supports both TLS 1.2 and TLS 1.3. When a client supports TLS 1.3, the connection automatically uses TLS 1.3. TLS 1.2 remains available to maintain compatibility with older clients and widgets.

No additional configuration is required to enforce the highest TLS protocol supported by the client. The TLS protocol and cipher used by a Mendix Cloud domain can be verified using the following tools:

1. SSL Labs SSL Server Test
2. Internet.nl

Outcome

NA

Additional information

Mendix documentation:

• TLSv1.3 support for Mendix Cloud (all regions)
• Security Findings FAQ – Weak ciphers supported in Mendix Cloud