4 ms·
Getting A+ on SSLLabs with Nginx and StartSSL
- ivanr 12y agoI would recommend that you reduce the DH parameter strength to 2048 bits. You're not noticing it now because most clients end up using ECDHE, but 4096-bit DH parameters are _very_ slow and yet don't provide any meaningful increase in security.
- mijndert 12y agoI'll look into that. Thanks!