Transport Layer Security (TLS) Version Support

What TLS versions do Ably endpoints support?

Ably endpoints support TLS versions 1.2 and 1.3. These secure, modern TLS versions encrypt and protect your data and communications from malicious attacks.

Why does Ably support TLS 1.2 and 1.3?

Ably prioritizes security and uses TLS 1.2 and TLS 1.3 to provide the strongest available encryption methods. TLS 1.2 has been a widely adopted secure protocol for many years, while TLS 1.3, the latest version, offers improved performance and even stronger security. By using these versions, Ably ensures:

  • Enhanced Security: TLS 1.2 and 1.3 protect against vulnerabilities, such as man-in-the-middle attacks, with robust security measures.
  • Faster Handshake: TLS 1.3 reduces the required round trips during the handshake process, creating quicker, more efficient connections.
  • Future-proof Encryption: TLS 1.2 and 1.3 keep your data secure long-term through forward secrecy and improved encryption algorithms.

Does Ably support older TLS versions like TLS 1.0 or TLS 1.1?

Ably can support older, less secure versions like TLS 1.0 and TLS 1.1 if needed. However, these versions pose various security risks and are no longer safe for modern applications. Ably advises using TLS 1.2 or higher to ensure optimal security practices.

Do I need to configure TLS settings manually to connect to Ably?

Modern environments support TLS 1.2 and 1.3 by default and clients and libraries are configured automatically. However, if you use a legacy system or client, you may need to update it to support these versions.

Can I force my Ably connections to use TLS 1.3 only?

Ably automatically defaults to the highest supported version, so if both the client and server support TLS 1.3, it uses it by default. Since TLS 1.3 is the most secure and efficient, you don’t need to enforce it manually — Ably’s infrastructure prioritizes it when available.


If you have any questions or need further assistance, contact our Support Team.