3 ms·
I appreciate the information you've given, but such a list of acronyms is exactly why so many webservers are configured incorrectly. Why can't this be made easi
by blowski 10y ago
I appreciate the information you've given, but such a list of acronyms is exactly why so many webservers are configured incorrectly. Why can't this be made easier? Maybe flags like "Modern Support Only" or "Legacy Browser Support".
- jlgaddis 10y agoIf you use the Mozilla SSL Configuration Generator [0], you can select "Modern", "Intermediate", or "Old", and end up with a cut-and-paste configuration snippet that'll best suit your specific needs. [0]: https://mozilla.github.io/server-side-tls/ssl-config-generator/ https://mozilla.github.io/server-side-tls/ssl-config-generat...
- blowski 10y agoThat's really useful, thank you. But my question still stands - why do nginx and Apache not provide the same settings as a configuration option?
- stouset 10y agoBecause what is implied by those terms changes over time, and minor changes can have major impacts on accessibility by older clients.