httpd-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Mads Toftum <m...@toftum.dk>
Subject Re: [PATCH] new default SSLCipherSuite and SSL BrowserMatch configuration
Date Fri, 06 Nov 2009 21:55:57 GMT
On Fri, Nov 06, 2009 at 01:04:01PM -0800, Lars Eilebrecht wrote:
> I would like to propose the attached patch for inclusion in 2.2
> (I'll commit to trunk soon unless I'm getting any -1s in response to
> this email).
> 
> -SSLCipherSuite ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP:+eNULL
> +SSLCipherSuite ALL:!ADH:!LOW:!MD5:!SSLV2:!NULL
>  
Big +1 from the peanut gallery - this has been an annoyance for quite
some time after browsers got pickier. I think Rainer is right that we
might as well drop export ciphers also.

vh

Mads Toftum
-- 
http://soulfood.dk

Mime
View raw message