Deprecation of DHE cipher suite support for TLS connections
Key point
Starting June 30, 2026, Vercel will discontinue support for the legacy DHE cipher suite.
Details
Vercel will discontinue support for the legacy cipher suite DHE-RSA-AES256-GCM-SHA384 starting June 30, 2026.
This change may affect automated systems, security scanners, or HTTP clients using non-standard TLS configurations. After that date, clients using TLS 1.2 must use one of the following 6 cipher suites to connect to the Vercel network.
ECDHE-ECDSA-AES128-GCM-SHA256ECDHE-RSA-AES128-GCM-SHA256ECDHE-ECDSA-AES256-GCM-SHA384ECDHE-RSA-AES256-GCM-SHA384ECDHE-ECDSA-CHACHA20-POLY1305ECDHE-RSA-CHACHA20-POLY1305
Modern clients and TLS 1.3 connections are not affected by this change. If you are operating integration systems or automation tools that connect to domains hosted on Vercel using TLS 1.2, you should check in advance whether the TLS client you are using supports the suites above.
This summary was generated automatically by AI. Check the original for the author's claims and context. Copyright belongs to the original author.
Our guide explains how the AI works. Report summary errors, attribution issues, or removal requests via Contact.