2 ms·

Couple links I have found valuable so far. They are not exactly Python / C++, instead they are more about concepts that can be implemented regardless of the pro

Couple links I have found valuable so far. They are not exactly Python / C++, instead they are more about concepts that can be implemented regardless of the programming language. - https://latacora.micro.blog/2018/04/03/cryptographic-right-answers.html https://latacora.micro.blog/2018/04/03/cryptographic-right-a... - https://dchest.com/authbook/ https://dchest.com/authbook/ - https://cheatsheetseries.owasp.org/index.html https://cheatsheetseries.owasp.org/index.html - https://ssl-config.mozilla.org/ https://ssl-config.mozilla.org/ Also looking for suggestions!

citrin_ru 5y ago
> https://ssl-config.mozilla.org/ https://ssl-config.mozilla.org/ Unless you are ready to update your web service config at least every year it is better to keep default SSL ciphers list. Manually configured N years ago cipher list does more harm than good. OpenSSL defaults are sensible if you use OpenSSL version which is not too old. And if OpenSSL has not been updated on your server for years you have much bigger problem.