3 ms·
ELB's HTTPS termination is mediocre and, last I checked, doesn't offer the best ciphers. A year ago It was impossible to get an A+ on ssltest https://www.ssllab
by spamizbad 12y ago
ELB's HTTPS termination is mediocre and, last I checked, doesn't offer the best ciphers. A year ago It was impossible to get an A+ on ssltest https://www.ssllabs.com/ssltest/ https://www.ssllabs.com/ssltest/ using ELB to terminate SSL.
Not to mention it still needlessly includes a ton of dangerously insecure ciphers just begging to be misclicked.
- dbarlett 12y agoThe current default, ELBSecurity Policy-2014-01 [1] enables ECDSA/PFS and is close to the Mozilla TLS recommendations [2]. Getting an A+ on the Qualys test requires the HSTS header [3], which isn't an ELB issue. [1] http://docs.aws.amazon.com/ElasticLoadBalancing/latest/DeveloperGuide/elb-security-policy-table.html http://docs.aws.amazon.com/ElasticLoadBalancing/latest/Devel... [2] https://wiki.mozilla.org/Security/Server_Side_TLS#Amazon_Web_Services_Elastic_Load_Balancer_.28AWS_ELB.29 https://wiki.mozilla.org/Security/Server_Side_TLS#Amazon_Web... [3] http://mir.aculo.us/2014/04/04/how-to-get-an-a-on-the-qualsys-ssl-labs-test/ http://mir.aculo.us/2014/04/04/how-to-get-an-a-on-the-qualsy...