8 May
2016
8 May
'16
6:59 p.m.
Regarding the cipher_list: As long you don't intend to switch to something else and keep using RSA certs, you can exclude everything with *-DSS-* and *-ECDSA-* anyway; it's just useless bloat in the initial handshake. FWIW, I copied (and trimmed, see above) the list from <https://weakdh.org/sysadmin.html>. --byte