httpd-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Yann Ylavic <ylavic....@gmail.com>
Subject Re: SSL/TLS best current practice
Date Tue, 26 May 2015 15:45:59 GMT
On Tue, May 26, 2015 at 5:29 PM, Andy Wang <awang@ptc.com> wrote:
>
>
>> ---
>>
>> #   SSL Cipher Suite:
>> #   List the ciphers that the client is permitted to negotiate.
>> #   See the mod_ssl documentation for a complete list.
>> SSLCipherSuite HIGH:MEDIUM:!MD5:!RC4
>> SSLProxyCipherSuite HIGH:MEDIUM:!MD5:!RC4
>
>
> !aNULL isn't needed?

No since !aNULL:!eNULL:!EXP is forcibly added to the configured ciphersuite.

Mime
View raw message