# TLS cipher settings

**URL:** <https://discuss.pomerium.com/t/tls-cipher-settings/111>\
**Category:** Support\
**Created:** [April 28, 2022, 7:13pm UTC](https://discuss.pomerium.com/t/tls-cipher-settings/111 "2022-04-28T19:13:59Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![ms1111](https://avatars.discourse-cdn.com/v4/letter/m/43a26b/32.png) [@ms1111](https://discuss.pomerium.com/u/ms1111)\
**Post date:** [April 28, 2022, 7:13pm UTC](https://discuss.pomerium.com/t/tls-cipher-settings/111/1 "2022-04-28T19:13:59Z")

</div>

## What happened?

Hi, I was looking through the reference documentation. Where would I find the server-side TLS settings for Pomerium? For example: minimum TLS version, and allowed ciphers.

I don’t actually need to change the encryption settings. The Pomerium defaults are fine (TLSv1.2, strong ciphers only). But I know our SOC 2 auditor will ask to see them next year, so I may have to make them explicit.

## What’s your environment like?

- Pomerium version (retrieve with `pomerium --version`): 0.17.2
- Server Operating System/Architecture/Cloud: Ubuntu 20.04

---

<div class="post-metadata">

**Author:** ![calebdoxsey](https://avatars.discourse-cdn.com/v4/letter/c/7bcc69/32.png) [@calebdoxsey](https://discuss.pomerium.com/u/calebdoxsey)\
**Post date:** [April 28, 2022, 7:44pm UTC](https://discuss.pomerium.com/t/tls-cipher-settings/111/2 "2022-04-28T19:44:39Z")

</div>

We use Envoy for TLS termination with these settings:

> <https://github.com/pomerium/pomerium/blob/820be99a2ffe79c0be4c51dd73988d363ab2633c/config/envoyconfig/clusters.go#L274>

---

<div class="post-metadata">

**Author:** ![ms1111](https://avatars.discourse-cdn.com/v4/letter/m/43a26b/32.png) [@ms1111](https://discuss.pomerium.com/u/ms1111)\
**Post date:** [April 29, 2022, 2:58am UTC](https://discuss.pomerium.com/t/tls-cipher-settings/111/3 "2022-04-29T02:58:47Z")

</div>

Thanks! I also found a helpful document under Docs → Community → Security: [Security | Pomerium](https://www.pomerium.com/docs/community/security.html#cryptography)