gcp Google Cloud release notes ·

App Engine flexible environment to enforce TLS 1.2+ for custom runtimes

securitygcpengineer
feature

Google Cloud is enhancing security for App Engine flexible environment custom runtimes by enforcing a minimum TLS version of 1.2. This change aims to block insecure traffic using older TLS versions like 1.1 and earlier, improving overall application security. Applications using custom runtimes will be opted into TLS 1.2+ starting August 2026, with an option to opt out until the end of that month. Full enforcement, potentially blocking non-compliant traffic, will begin in September 2026.

Features (1)
  • App Engine flexible environment custom runtimes

    To improve security, starting in August 2026, App Engine opts your application into TLS version 1.2 and later. You can opt out until the end of August 2026. Starting in September 2026, App Engine might permanently block insecure traffic with TLS version 1.1 and earlier. For more information, see Secure minimum TLS .

Read the original announcement →

https://docs.cloud.google.com/release-notes#August_14_2026

Related releases