Custom security settings for higher XMPP Observatory score

decent-im / decent.im

XMPP public service with gateways to other IM networks

https://decent.im

2 stars 0 forks source link

Closed andrey-utkin closed 7 years ago

andrey-utkin commented 8 years ago

This breaks stuff a bit, e.g. for Pidgin, so i'm not going to set this up immediately.

ssl {
protocol = "tlsv1_1+";
ciphers = "HIGH+kEDH:HIGH+kEECDH:!PSK:!SRP:!3DES:!aNULL:!AES128";
options = {
cipher_server_preference = false;
}
}

andrey-utkin commented 7 years ago

Decided to lean on Prosody who seem to maintain sane defaults.