---
description: Keyless SSL connections that use ECDSA certificates negotiate TLS 1.3 when TLS 1.3 is enabled on the zone.
title: Keyless SSL supports TLS 1.3 with ECDSA certificates
image: https://developers.cloudflare.com/changelog/post/2026-10-30-keyless-ssl-tls13-ecdsa/og.png?v=5e17c375a4c3cda3
---

[Skip to content](#main-content)

[View RSS feeds](https://developers.cloudflare.com/fundamentals/new-features/available-rss-feeds/) [ Subscribe to RSS](https://developers.cloudflare.com/changelog/rss/index.xml)

[Back to all posts](https://developers.cloudflare.com/changelog)

October 30, 2026

## Keyless SSL supports TLS 1.3 with ECDSA certificates

[SSL/TLS](https://developers.cloudflare.com/ssl/)

Copy as Markdown| [View as Markdown](https://developers.cloudflare.com/changelog/post/2026-10-30-keyless-ssl-tls13-ecdsa/index.md)| [Agent setup](https://developers.cloudflare.com/agent-setup/)

[Keyless SSL](https://developers.cloudflare.com/ssl/keyless-ssl/) supports TLS 1.3 for ECDSA certificates. When [TLS 1.3](https://developers.cloudflare.com/ssl/edge-certificates/additional-options/tls-13/) is enabled on your zone, visitors connecting to a hostname that serves a Keyless ECDSA certificate negotiate TLS 1.3, and your private keys stay on your own key server.

Keyless SSL connections that use RSA certificates continue to negotiate up to TLS 1.2.

For details, refer to the [Keyless SSL limitations](https://developers.cloudflare.com/ssl/keyless-ssl/#limitations).

```json
{"@context":"https://schema.org","@type":"BlogPosting","@id":"https://developers.cloudflare.com/changelog/post/2026-10-30-keyless-ssl-tls13-ecdsa/#page","headline":"Keyless SSL supports TLS 1.3 with ECDSA certificates","description":"Keyless SSL connections that use ECDSA certificates negotiate TLS 1.3 when TLS 1.3 is enabled on the zone.","url":"https://developers.cloudflare.com/changelog/post/2026-10-30-keyless-ssl-tls13-ecdsa/","inLanguage":"en","image":"https://developers.cloudflare.com/changelog/post/2026-10-30-keyless-ssl-tls13-ecdsa/og.png?v=5e17c375a4c3cda3","dateModified":"2026-10-30","datePublished":"2026-10-30","publisher":{"@type":"Organization","name":"Cloudflare","description":"One platform for your apps, agents, and workforce. Build, secure, and scale without managing infrastructure","url":"https://www.cloudflare.com/","sameAs":["https://github.com/cloudflare","https://www.linkedin.com/company/cloudflare","https://x.com/cloudflare"],"logo":{"@type":"ImageObject","url":"https://developers.cloudflare.com/logo.svg"},"address":{"@type":"PostalAddress","streetAddress":"101 Townsend St","addressLocality":"San Francisco","addressRegion":"CA","postalCode":"94107","addressCountry":"US"},"contactPoint":[{"@type":"ContactPoint","contactType":"Customer Support","url":"https://support.cloudflare.com/","availableLanguage":["English"]},{"@type":"ContactPoint","contactType":"Sales","url":"https://www.cloudflare.com/contact/","availableLanguage":["English"]}]},"isPartOf":{"@type":"WebSite","@id":"https://developers.cloudflare.com/#website","name":"Cloudflare Docs","url":"https://developers.cloudflare.com/"}}
```