Skip to content

Commit c965b79

Browse files
Adjust stacked up callouts and remove redundant Note that
1 parent 24ca965 commit c965b79

File tree

1 file changed

+7
-12
lines changed

1 file changed

+7
-12
lines changed

src/content/docs/ssl/edge-certificates/additional-options/cipher-suites/customize-cipher-suites.mdx

Lines changed: 7 additions & 12 deletions
Original file line numberDiff line numberDiff line change
@@ -18,11 +18,7 @@ You may want to do this to follow specific [recommendations](/ssl/edge-certifica
1818
Customizing cipher suites will not lead to any downtime in your SSL/TLS protection.
1919

2020
:::note
21-
22-
23-
Note that this process only refers to connections [between clients and the Cloudflare network](/ssl/concepts/#edge-certificate). For connections between Cloudflare and your origin server, refer to [Origin server > Cipher suites](/ssl/origin-configuration/cipher-suites/).
24-
25-
21+
This documentation only refers to connections [between clients and the Cloudflare network](/ssl/concepts/#edge-certificate). For connections between Cloudflare and your origin server, refer to [Origin server > Cipher suites](/ssl/origin-configuration/cipher-suites/).
2622
:::
2723

2824
## How it works
@@ -49,6 +45,11 @@ ECDSA cipher suites are prioritized over RSA, and Cloudflare preserves the speci
4945

5046
## Set up
5147

48+
49+
:::note
50+
For guidance around custom hostnames, refer to [TLS settings - Cloudflare for SaaS](/cloudflare-for-platforms/cloudflare-for-saas/security/certificate-management/enforce-mtls/#cipher-suites).
51+
:::
52+
5253
### Before you begin
5354

5455
Note that:
@@ -71,15 +72,9 @@ Note that:
7172
4. Make an API call to either the [Edit zone setting](/api/resources/zones/subresources/settings/methods/edit/) endpoint or the [Edit TLS setting for hostname](/api/resources/hostnames/subresources/settings/subresources/tls/methods/update/) endpoint, specifying `ciphers` in the URL. List your array of chosen cipher suites in the `value` field.
7273

7374
:::note
74-
7575
Updating the cipher suites will result in certificates being redeployed.
7676
:::
7777

78-
:::caution
79-
80-
For guidance around custom hostnames, refer to [TLS settings - Cloudflare for SaaS](/cloudflare-for-platforms/cloudflare-for-saas/security/certificate-management/enforce-mtls/#cipher-suites).
81-
:::
82-
8378
<Tabs> <TabItem label="modern">
8479

8580
<Render file="ciphers-api-general-notes" />
@@ -133,7 +128,7 @@ curl --request PATCH \
133128

134129
:::caution
135130

136-
For compliance with PCI DSS, also [enable TLS 1.3](/ssl/edge-certificates/additional-options/tls-13/#enable-tls-13) on your zone and make sure to up your [Minimum TLS version](/ssl/edge-certificates/additional-options/minimum-tls/) to `1.2`.
131+
For compliance with PCI DSS, also [enable TLS 1.3](/ssl/edge-certificates/additional-options/tls-13/#enable-tls-13) on your zone and make sure to up your [Minimum TLS version](/ssl/edge-certificates/additional-options/minimum-tls/) to `1.2`.
137132
:::
138133

139134
</TabItem> <TabItem label="fips-140-2">

0 commit comments

Comments
 (0)