Cipher Suites

What It Does

Connects to the domain over TLS, fingerprints the CDN/edge from response headers, then returns the matching reference cipher profile with each entry classified by protocol version, key exchange, authentication, encryption, MAC, AEAD support, forward secrecy, security level (recommended/secure/weak/insecure), and OpenSSL name. Grades follow the tightened 2026 baseline (CBC → D, RSA-kex without PFS → C, 3DES/RC4/NULL → F). Includes a methodology block stating profile name, source URL, and verifiedAt date so consumers know this is reference data, not measurement.

Why It's Useful

Cipher suite configuration determines the actual encryption strength of TLS connections. Weak ciphers (RC4, DES, export ciphers) can be exploited even with modern TLS versions, and missing forward secrecy means a compromised server key decrypts all past traffic. Regular cipher auditing against Mozilla SSL Configuration Generator (modern/intermediate profiles) and NIST SP 800-52r2 is required for PCI-DSS and SOC 2 compliance.

Use Cases

Parameters

Response Fields

Code Examples

curl "https://api.edgedns.dev/v1/domain/ciphers" \
  -H "Authorization: Bearer YOUR_API_KEY" \
  -d "domain=example.com"

const response = await fetch(
  'https://api.edgedns.dev/v1/domain/ciphers?domain=example.com',
  {
    headers: {
      'Authorization': 'Bearer YOUR_API_KEY'
    }
  }
);

const data = await response.json();
console.log(data);

import requests

response = requests.get(
    'https://api.edgedns.dev/v1/domain/ciphers',
    headers={'Authorization': 'Bearer YOUR_API_KEY'},
    params={
    'domain': 'example.com'
    }
)

data = response.json()
print(data)

Related Endpoints

External References

Learn more about the standards and protocols behind this endpoint.