Implement stronger Diffie-Hellman key for nginx

meteorhacks / mup-frontend-server

Frontend Server for Meteor Up

37 stars 35 forks source link

Closed edmundkwok closed 8 years ago

edmundkwok commented 8 years ago

Hi @arunoda,

As per #4, this PR implement a stronger Diffie-Hellman (DH) group for nginx, based on recommendations at https://weakdh.org/sysadmin.html.

I've tested this on 2 Meteor sites, and @guilcorp tested too, and we confirm that it leads to an A+ rating on SSL Labs.

arunoda commented 8 years ago

Awesome.

arist0tl3 commented 8 years ago

@edmundkwok Out of curiosity, is there a reason you didn't go with 4096?