bonus.tls13
TLS 1.3 Supported
What we check
We check whether the mail server successfully negotiates TLS 1.3. This bonus finding is emitted in the Bonus category when TLS 1.3 support is confirmed.
What this finding means
The mail server supports TLS 1.3 — the latest and most secure version of TLS. This is a positive bonus signal indicating a modern TLS configuration that provides mandatory forward secrecy, AEAD-only ciphers, and a streamlined handshake.
Why it matters
- Best available encryption. TLS 1.3 eliminates all legacy cipher options — every connection uses AEAD with forward secrecy.
- Performance. The 1-RTT handshake reduces connection setup latency compared to TLS 1.2.
- Bonus recognition. TLS 1.3 support contributes positively to the overall score, rewarding proactive security configuration.
Evidence example
Negotiated protocol: TLSv1.3
Cipher: TLS_AES_256_GCM_SHA384
TLS 1.3 supported — bonus awarded