/plushcap/analysis/cloudflare/tracking-our-ssl-configuration

Tracking our SSL configuration

What's this blog post about?

John Graham-Cumming has created a Github repository called "sslconfig" to document changes in SSL configuration for serving HTTPS as the security landscape evolves. The repository includes historical updates from an internal source and will be synchronized with current configurations. Changes have been made due to attacks on SSL/TLS, such as Lucky 13, BEAST, and biases in RC4. OpenSSL has been modified to prevent the use of RC4 for TLS 1.1 and above, introducing ECDSA, and examining suitable ciphers for maximum security. The author encourages feedback and contributions through comments, criticisms, and pull requests.

Company
Cloudflare

Date published
May 3, 2014

Author(s)
John Graham-Cumming

Word count
183

Hacker News points
None found.

Language
English


By Matt Makai. 2021-2024.