> https://ssl-config.mozilla.org/ https://ssl-config.mozilla.org/ Unless you are ready to update your web service config at least every year it is better to ke

> https://ssl-config.mozilla.org/ https://ssl-config.mozilla.org/ Unless you are ready to update your web service config at least every year it is better to keep default SSL ciphers list. Manually configured N years ago cipher list does more harm than good. OpenSSL defaults are sensible if you use OpenSSL version which is not too old. And if OpenSSL has not been updated on your server for years you have much bigger problem.