This is generally helpful, but generally avoid advice from people who refer to signature algorithms or cryptographic hash functions as ciphers. It should also

This is generally helpful, but generally avoid advice from people who refer to signature algorithms or cryptographic hash functions as ciphers. It should also be mentioned how you came up with your ordering of TLS cipher suites, in declining priority 1. Forward security is preferred (ECDH|DH > RSA) 2. AESGCM > AES256 > AES|AES128 > 3DES 3. ECDH > DH