4 ms·
For starters, please refer to https://wiki.mozilla.org/Security/Server_Side_TLS https://wiki.mozilla.org/Security/Server_Side_TLS. For SSH, I lack clear, good
by xenophonf 12y ago
For starters, please refer to https://wiki.mozilla.org/Security/Server_Side_TLS https://wiki.mozilla.org/Security/Server_Side_TLS. For SSH, I lack clear, good advice. I've tended to disable weaker ciphersuites using Mozilla's TLS configuration advice as a guide, and I've also tended to use larger key sizes than the defaults. As questionable as NIST's guidelines have been lately, I tend to follow the high end of their recommended key sizes, so 4096-byte public keys, etc.
- phunge 12y agoThis was some recent advice for SSH: https://stribika.github.io/2015/01/04/secure-secure-shell.html https://stribika.github.io/2015/01/04/secure-secure-shell.ht... It was on discussed on HN, at the time noone pointed out anything glaring about the advice given.
- PhantomGremlin 12y agoThat's a nice link, thanks. I like the writing style. Clear advice, with explanations, not too wordy. Do you have a pointer to the HN discussion?