[arch-devops] HTTP/2 on Luna

Jens Adam jra at byte.cx
Sun May 8 18:59:45 UTC 2016


Regarding the cipher_list:

As long you don't intend to switch to something else and keep using
RSA certs, you can exclude everything with *-DSS-* and *-ECDSA-*
anyway; it's just useless bloat in the initial handshake.

FWIW, I copied (and trimmed, see above) the list from
<https://weakdh.org/sysadmin.html>.

--byte
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 455 bytes
Desc: Digitale Signatur von OpenPGP
URL: <https://lists.archlinux.org/pipermail/arch-devops/attachments/20160508/a1390223/attachment.asc>


More information about the arch-devops mailing list