Cipher Suites

What It Does

Connects to the domain over TLS, detects the CDN or server infrastructure from response headers, then reports the appropriate cipher suite profile. For detected CDNs (Cloudflare, CloudFront, Fastly, Akamai), it uses the CDN's published default cipher suites. Each cipher is classified by protocol version, key exchange, authentication, encryption, MAC, AEAD support, forward secrecy, security level (recommended/secure/weak/insecure), and includes the OpenSSL name for cross-referencing. Returns overall grade, Mozilla Modern/Intermediate compatibility, and actionable recommendations.

Why It's Useful

Cipher suite configuration determines the actual encryption strength of TLS connections. Weak ciphers (RC4, DES, export ciphers) can be exploited even with modern TLS versions, and missing forward secrecy means a compromised server key decrypts all past traffic. Regular cipher auditing against Mozilla SSL Configuration Generator (modern/intermediate profiles) and NIST SP 800-52r2 is required for PCI-DSS and SOC 2 compliance.

Use Cases

Parameters

Response Fields

Code Examples

curl "https://api.edgedns.dev/v1/domain/ciphers" \
  -H "Authorization: Bearer YOUR_API_KEY" \
  -d "domain=example.com"

const response = await fetch(
  'https://api.edgedns.dev/v1/domain/ciphers?domain=example.com',
  {
    headers: {
      'Authorization': 'Bearer YOUR_API_KEY'
    }
  }
);

const data = await response.json();
console.log(data);

import requests

response = requests.get(
    'https://api.edgedns.dev/v1/domain/ciphers',
    headers={'Authorization': 'Bearer YOUR_API_KEY'},
    params={
    'domain': 'example.com'
    }
)

data = response.json()
print(data)

Related Endpoints

External References

Learn more about the standards and protocols behind this endpoint.