# Deprecating the DHE cipher suite for TLS connections

By Steven Van · 2026-03-12

Vercel drops the legacy DHE-RSA-AES256-GCM-SHA384 cipher suite on June 30th, 2026, affecting older TLS 1.2 clients.

[Vercel](<https://creatorstoolbox.com/tools/vercel>) is dropping support for the legacy DHE-RSA-AES256-GCM-SHA384 cipher suite on **June 30th, 2026**. The cipher sees little use from modern browsers but can still show up in automated systems, security scanners, and HTTP clients with non-standard TLS configurations.

After that date, clients connecting over TLS 1.2 will need to support one of six remaining cipher suites: ECDHE-ECDSA-AES128-GCM-SHA256, ECDHE-RSA-AES128-GCM-SHA256, ECDHE-ECDSA-AES256-GCM-SHA384, ECDHE-RSA-AES256-GCM-SHA384, ECDHE-ECDSA-CHACHA20-POLY1305, or ECDHE-RSA-CHACHA20-POLY1305. Modern clients and TLS 1.3 connections are unaffected. Vercel recommends that anyone running integrations or automated systems connecting to a Vercel-hosted domain over TLS 1.2 check that their client supports one of these suites, noting that modern TLS libraries do so by default. Full details are in the [announcement](<https://vercel.com/changelog/deprecating-the-dhe-cipher-suite-for-tls-connections>).

[![](<https://vercel.com/api/docs-og?title=Encryption%20and%20TLS&format=docs&sig=cfb6a254378b38c97586c9b7e58be8be836ddfd45d2144d1e79b878dafca7df0&category=Ship%20and%20scale&subcategory=CDN&subcategory2=Security>)](<https://vercel.com/docs/cdn-security/encryption#supported-ciphers>)

![Vercel](<https://www.google.com/s2/favicons?domain=vercel.com&sz=128>)

Vercel

The platform for frontend developers — deploy, preview, and scale web apps and AI agents with zero config.

[View Vercel →](<https://creatorstoolbox.com/tools/vercel>)

Sources

[Original source](<https://vercel.com/docs/cdn-security/encryption#supported-ciphers>)

[Read Deprecating the DHE cipher suite for TLS connections on Creators Toolbox](<https://creatorstoolbox.com/blog/vercel-deprecating-the-dhe-cipher-suite-for-tls-connections>)

---
Canonical source: https://creatorstoolbox.com/blog/vercel-deprecating-the-dhe-cipher-suite-for-tls-connections