search

observing / balancerbattle

WebSocket loadbalancer battle
MIT License
857 stars 69 forks source link

SSL Ciphers #12

Open Hades32 opened 8 years ago

Hades32 commented 8 years ago

"it was all good and used RC4 by default which is really fast."

Actually this a terrible idea in practice and should really not be used if you care about security AT ALL!

Therefore I'd suggest that testing with a realistic SSL Setup makes much more sense, as that is what people will/should have on their productive servers...

dvergeylen commented 7 years ago

I would suggest https://cipherli.st/ which contains very good configuration for common servers. It ensures having very good results regarding SSL configurations. I "+1" @Hades32 as using RC4 is a bad idea when talking about security. :confused: