Show HN: Kloudsec, Our Bootstrapped Anycast CDN with LetsEncrypt for Your Site

Re:Show HN: Kloudsec, Our Bootstrapped Anycast CDN with Lets... by newman314 on Thursday January 14, 2016 @03:02AM (#10900136)

https://www.ssllabs.com/ssltest/analyze.html?d=kloudsec.com

Pretty good but not sure if you need a 4k cert (5651 bytes). That's quite a bit of overhead as well as there shouldn't be a need to send the root cert. Save yourself some traffic. Also, you could probably pare down the cipher list somewhat. The combo of DHE + 4k RSA is probably going to chew up a bunch of CPU unnecessarily.

But pretty nice so far.

[ Parent | on HN ]

Re:Show HN: Kloudsec, Our Bootstrapped Anycast CDN with Lets... by arkadiyt on Thursday January 14, 2016 @04:32AM (#10900359)

More importantly their 4096 bit certificate is signed by a 2048 bit intermediary certificate, so there is no additional security over 2048 bits.

[ Parent | on HN ]

Re:Show HN: Kloudsec, Our Bootstrapped Anycast CDN with Lets... by nicolaslegland on Thursday January 14, 2016 @08:51AM (#10901332)

https://tls.imirhil.fr/https/kloudsec.com

SSL Labs is nice, but a bit permissive, not sure anyone really needs 3DES nowadays.

[ Parent | on HN ]

Re:Show HN: Kloudsec, Our Bootstrapped Anycast CDN with Lets... by newman314 on Thursday January 14, 2016 @12:43PM (#10902921)

That's a pretty nice site but provides no cues towards what the different colors mean as well as potential remediation.

I can kinda guess at the French words but would rather read it in English.

[ Parent | on HN ]