search

deconst / services

Hand-crafted artisanal Dockerfiles for non-core services
Apache License 2.0
2 stars 3 forks source link

Use the Qualsys cipherlist instead of cipherli.st's. #7

Closed smashwilson closed 8 years ago

smashwilson commented 8 years ago

SSLLabs is still complaining about ciphers that support weak DH parameters. Let's use their cipherlist instead; it has a bunch of defeats that are probably important.

Reference: https://weakdh.org/sysadmin.html