Users can now securely recover access to their account if they lose their two-factor authentication device. The new self-service recovery flow makes it possible to regain access without contacting support.
We've added a dedicated tags page where you can view all tags in your account, create them manually, and see which redirects and users are associated.
This makes it easy to set up tags ahead of time without first creating a redirect that uses the tag.
You can now use Accept-Language header values in dynamic destinations and rules. New variables include {acceptLanguage.raw}, {acceptLanguage.primary}, {acceptLanguage.language}, {acceptLanguage.region}, and {acceptLanguage.q}, making it easy to steer visitors based on their preferred language.
We've added support for SAML Single Logout (SLO). Users can now be signed out through both Identity Provider (IdP)-initiated logout and Service Provider (SP)-initiated logout, providing a complete logout experience across connected applications.
Redirects are no longer limited to ports 80 and 443. We now accept incoming traffic on additional standard HTTP and HTTPS ports, making it easier to redirect applications and services running on custom ports.
Supported HTTP ports: 80, 8080, 8880, 2052, 2082, 2086, 2095.
Supported HTTPS ports: 443, 2053, 2083, 2087, 2096, 8443.
Customers on Pro, Business, and Enterprise plans can now enable short-lived SSL certificates. These certificates are valid for just 160 hours and are renewed automatically. You can choose between a preferred mode with automatic fallback or a strict mode that only issues short-lived certificates.
We've updated our Let's Encrypt certificate profile to use a 45-day validity period instead of 90 days. Certificates continue to renew automatically, but this shorter lifecycle aligns with industry trends toward more frequent certificate rotation and helps improve overall TLS security.
Destination monitoring now performs health checks from multiple geographic locations around the world. This helps distinguish between a global outage and a destination that's only unavailable or blocked in a specific country, giving you a more accurate picture of your destination's availability.