3 ms·
I would love to see a github hosted repository that demonstrated the best practises as default configs for Apache and Nginx. Such a config would be heavily com
by buro9 13y ago
I would love to see a github hosted repository that demonstrated the best practises as default configs for Apache and Nginx.
Such a config would be heavily commented and include links to the source advisory notices and explain why.
This way we would have something we could easily implement from a config perspective, have notifications when the advisory changes, and also be educated about what various things in the config would do.
Weakening SSL/TLS is surprisingly easy with the wrong options, and instead it should be really easy to get it right.
- ivanr 13y agoHere you go: https://github.com/ioerror/duraconf https://github.com/ioerror/duraconf I don't know how good it is because I have not looked.
- buro9 13y agoA quick glance at the Nginx config says that it doesn't reflect the level of consideration in the OP's linked PDF. This is why I'd like the SSLLabs + Mozilla + other parties to work together to produce a single set of configs that reflect the combined best practise. To ensure that this is a complete thing.