Closed andrey-utkin closed 7 years ago
This breaks stuff a bit, e.g. for Pidgin, so i'm not going to set this up immediately.
ssl { protocol = "tlsv1_1+"; ciphers = "HIGH+kEDH:HIGH+kEECDH:!PSK:!SRP:!3DES:!aNULL:!AES128"; options = { cipher_server_preference = false; } }
Decided to lean on Prosody who seem to maintain sane defaults.
This breaks stuff a bit, e.g. for Pidgin, so i'm not going to set this up immediately.