Company
Date Published
May 3, 2014
Author
John Graham-Cumming
Word count
183
Language
English
Hacker News points
None

Summary

John Graham-Cumming has created a Github repository called "sslconfig" to document changes in SSL configuration for serving HTTPS as the security landscape evolves. The repository includes historical updates from an internal source and will be synchronized with current configurations. Changes have been made due to attacks on SSL/TLS, such as Lucky 13, BEAST, and biases in RC4. OpenSSL has been modified to prevent the use of RC4 for TLS 1.1 and above, introducing ECDSA, and examining suitable ciphers for maximum security. The author encourages feedback and contributions through comments, criticisms, and pull requests.