App for Cloudflare® Pro 1.8.9

[RROKK]

Minor Issues Needing a Fix—Maybe: New approach… I felt it would be more appropriate to consolidate minor issues as I encountered them into a single thread.

Function: 0-RTT Connection Resumption & TLS 1.3 Correlation

Problem: It seems 0-RTT Connection Resumption and TLS 1.3 have some sort of one-on, one-off, and vice versa. When one of these toggles is switched on the other toggle is switched off and vice versa. That's after returning to the Setup page and clicking on the Save Changes button. Not that it is mandatory to do it, just that I've done it multiple times, setting up multiple websites with AFC, and it keeps happening.

Clarification: It is not that TLS 1.3 is toggled off. The problem is that if you select "On," it will revert to "Zero round trip." when 0-RTT Connection Resumption is toggled on, vice versa.

 

[digitalpoint]

I think what you are seeing is being done on Cloudflare's side. In the normal Cloudflare dashboard, if you have both turned on, and you disable TLS 1.3, 0-RTT Connection Resumption is also automatically disabled. Honestly I'm not really sure why they do that, but they do. It's extra weird because you can disable TLS 1.3, 0-RTT gets automatically disabled, but then you can manually enable 0-RTT and TLS 1.3 can stay off.

So there's some correlation/link on Cloudflare's API backend that's doing it, but truthfully, I can't really answer the "why" part. Either way, since it's happening on Cloudflare's side (even in their normal dashboard), not much can be done about it.

 

[RROKK]

Got. I'll take speed over security in this situation and toggle 0-RTT Connection Resumption to "On" and let TLS 1.3 revert to "Zero round trip." Not that it even matters if TLS 1.3 is On or Zero round trip.