---
title: Legacy TLS servers are now monitorable — and flagged
description: A server that only speaks outdated TLS ciphers is exactly the kind you want to keep an eye on, yet checks against it used to fail outright. We now retry…
canonical: https://watchfor.io/changelog/2026-07-18-legacy-tls-monitoring
---

[All updates](/changelog/page/8#2026-07-18-legacy-tls-monitoring) ⚡ Improved Jul 18, 2026 · v 4.0.6

# Legacy TLS servers are now monitorable — and flagged

A server that only speaks outdated TLS ciphers is exactly the kind you want to keep an eye on, yet checks against it used to fail outright. We now retry automatically with a legacy-compatible handshake, so those checks succeed. SSL monitors also show the negotiated TLS version and cipher suite, and mark such servers with a Legacy TLS badge so you know their configuration needs attention.

## What you saw before

Some older servers, load balancers and embedded devices only offer cipher suites without forward secrecy. Modern TLS clients refuse those by default, so an SSL or HTTPS check against such a server failed with a handshake error. The monitor showed down even though the site worked in many browsers, and you could not tell a dead server from an old configuration.

## What happens now

- If the normal handshake fails for this reason, the check tries again with a legacy-compatible handshake. When that works, the check passes.

- The SSL monitor shows the TLS version and the cipher suite it negotiated.

- A server that only accepted the legacy handshake gets an amber Legacy TLS badge, so the monitor stays green without hiding the problem.

## Example

You monitor files.example.com , a file server on hardware from 2014. Before, every check failed and the monitor sat at down . Now it shows up , with TLS 1.2 and an older cipher suite next to the Legacy TLS badge. That badge is your reminder to enable modern (ECDHE) ciphers on the server, and once you do, the badge disappears on the next check.

## Where to look

Open the SSL monitor's Overview . The [certificates guide](/docs/monitors/certificates) explains every badge and the TLS details.

Share this update

---

Canonical page: https://watchfor.io/changelog/2026-07-18-legacy-tls-monitoring · Site guide: https://watchfor.io/llms.txt