Tracking our SSL configuration
John Graham-Cumming has created a Github repository called "sslconfig" to document changes in SSL configuration for serving HTTPS as the security landscape evolves. The repository includes historical updates from an internal source and will be synchronized with current configurations. Changes have been made due to attacks on SSL/TLS, such as Lucky 13, BEAST, and biases in RC4. OpenSSL has been modified to prevent the use of RC4 for TLS 1.1 and above, introducing ECDSA, and examining suitable ciphers for maximum security. The author encourages feedback and contributions through comments, criticisms, and pull requests.
Company
Cloudflare
Date published
May 3, 2014
Author(s)
John Graham-Cumming
Word count
183
Hacker News points
None found.
Language
English