HTTP/1.0 Protocol Downgrade Detected

Symptoms

The PCI scan report returns a failure with the message "HTTP/1.0 Protocol Downgrade Detected" for cPanel services.

Cause

The cPanel daemon service (cpsrvd) supports the "HTTP/1.0" protocol without the option to disable. Recently, this protocol was flagged by PCI scanners and vendors.

Resolution

No solutions are currently available.

We've opened an internal case for our development team to investigate this further. For reference, the case number is CPANEL-50979. Follow this article to receive an email notification when a solution is published in the product.