4 ms·
Some advice from the authors on how to properly deploy Diffie-Hellman: https://weakdh.org/sysadmin.html https://weakdh.org/sysadmin.html
by Pyxl101 11y ago
Some advice from the authors on how to properly deploy Diffie-Hellman:
https://weakdh.org/sysadmin.html https://weakdh.org/sysadmin.html
- nly 11y agoThere's also https://cipherli.st/ https://cipherli.st/ which, imho, is better. What's really awful is the sets are similar yet almost disjoint, only agreeing on 4 cipher combos: DHE-RSA-AES128-GCM-SHA256 DHE-RSA-AES128-SHA ECDHE-RSA-AES128-GCM-SHA256 ECDHE-RSA-AES128-SHA Personally I use the shorter "strong" config off cipherli.st
- Buge 11y agoWhen I checked, I got 16 in common. weakdh.org recommended 43, and cipherlist.st 16. cipherlist.st was a subset of the weakdh.org list.
- dadrian 11y agoOur cipher recommendations on the Weak DH site come directly from Mozilla. See https://wiki.mozilla.org/Security/Server_Side_TLS#Recommended_configurations https://wiki.mozilla.org/Security/Server_Side_TLS#Recommende...