What compatibility trade-offs do we need to make in order to use a hardened SSL config for Nginx?
- by nathan.f77
I found some hardened SSL settings in github.com/ioerror/duraconf.
Here is the header from the config:
This is an example of a high security, somewhat compatible SSLv3 and TLSv1
enabled HTTPS proxy server. The server only allows modes that provide perfect
forward secrecy; no other modes are offered. Anonymous cipher modes are
…