Cloudflare 默认支持以下密码套件。如有需要，您可以限制您的网站或应用，使其仅使用特定密码套件。
| 密码名称 | 最低协议 | 安全建议 | 密码套件 | IANA 名称 |
|---|---|---|---|---|
| ECDHE-ECDSA-AES128-GCM-SHA256 | TLS 1.2 | 现代、兼容、旧版 (Modern, Compatible, Legacy) | [0xc02b] | TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 |
| ECDHE-ECDSA-CHACHA20-POLY1305 | TLS 1.2 | 现代、兼容、旧版 (Modern, Compatible, Legacy) | [0xcca9] | TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256 |
| ECDHE-RSA-AES128-GCM-SHA256 | TLS 1.2 | 现代、兼容、旧版 (Modern, Compatible, Legacy) | [0xc02f] | TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 |
| ECDHE-RSA-CHACHA20-POLY1305 | TLS 1.2 | 现代、兼容、旧版 (Modern, Compatible, Legacy) | [0xcca8] | TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256 |
| ECDHE-ECDSA-AES128-SHA256 | TLS 1.2 | 兼容、旧版 (Compatible, Legacy) | [0xc023] | TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256 |
| ECDHE-ECDSA-AES128-SHA | TLS 1.0 | 旧版 (Legacy) | [0xc009] | TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA |
| ECDHE-RSA-AES128-SHA256 | TLS 1.2 | 兼容、旧版 (Compatible, Legacy) | [0xc027] | TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256 |
| ECDHE-RSA-AES128-SHA | TLS 1.0 | 旧版 (Legacy) | [0xc013] | TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA |
| AES128-GCM-SHA256 | TLS 1.2 | 旧版 (Legacy) | [0x9c] | TLS_RSA_WITH_AES_128_GCM_SHA256 |
| AES128-SHA256 | TLS 1.2 | 旧版 (Legacy) | [0x3c] | TLS_RSA_WITH_AES_128_CBC_SHA256 |
| AES128-SHA | TLS 1.0 | 旧版 (Legacy) | [0x2f] | TLS_RSA_WITH_AES_128_CBC_SHA |
| ECDHE-ECDSA-AES256-GCM-SHA384 | TLS 1.2 | 现代、兼容、旧版 (Modern, Compatible, Legacy) | [0xc02c] | TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384 |
| ECDHE-ECDSA-AES256-SHA384 | TLS 1.2 | 兼容、旧版 (Compatible, Legacy) | [0xc024] | TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384 |
| ECDHE-RSA-AES256-GCM-SHA384 | TLS 1.2 | 现代、兼容、旧版 (Modern, Compatible, Legacy) | [0xc030] | TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 |
| ECDHE-RSA-AES256-SHA384 | TLS 1.2 | 兼容、旧版 (Compatible, Legacy) | [0xc028] | TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384 |
| ECDHE-RSA-AES256-SHA | TLS 1.0 | 旧版 (Legacy) | [0xc014] | TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA |
| AES256-GCM-SHA384 | TLS 1.2 | 旧版 (Legacy) | [0x9d] | TLS_RSA_WITH_AES_256_GCM_SHA384 |
| AES256-SHA256 | TLS 1.2 | 旧版 (Legacy) | [0x3d] | TLS_RSA_WITH_AES_256_CBC_SHA256 |
| AES256-SHA | TLS 1.0 | 旧版 (Legacy) | [0x35] | TLS_RSA_WITH_AES_256_CBC_SHA |
| DES-CBC3-SHA | TLS 1.0 | 旧版 (Legacy) | [0x0a] | TLS_RSA_WITH_3DES_EDE_CBC_SHA |
| AEAD-AES128-GCM-SHA256 * | TLS 1.3 | 现代、兼容、旧版 (Modern, Compatible, Legacy) | {0x13,0x01} | TLS_AES_128_GCM_SHA256 |
| AEAD-AES256-GCM-SHA384 * | TLS 1.3 | 现代、兼容、旧版 (Modern, Compatible, Legacy) | {0x13,0x02} | TLS_AES_256_GCM_SHA384 |
| AEAD-CHACHA20-POLY1305-SHA256 * | TLS 1.3 | 现代、兼容、旧版 (Modern, Compatible, Legacy) | {0x13,0x03} | TLS_CHACHA20_POLY1305_SHA256 |