News for hackers. Stuff that matters.

A comment on Achieving a Perfect SSL Labs Score with Go. Parent comment

Re:Achieving a Perfect SSL Labs Score with Go by blowski on Sunday May 22, 2016 @12:14PM (#11749123)
I appreciate the information you've given, but such a list of acronyms is exactly why so many webservers are configured incorrectly. Why can't this be made easier? Maybe flags like "Modern Support Only" or "Legacy Browser Support".
[ Parent | on HN ]
Re:Achieving a Perfect SSL Labs Score with Go by jlgaddis on Sunday May 22, 2016 @12:40PM (#11749230)
If you use the Mozilla SSL Configuration Generator [0], you can select "Modern", "Intermediate", or "Old", and end up with a cut-and-paste configuration snippet that'll best suit your specific needs.

[0]: https://mozilla.github.io/server-side-tls/ssl-config-generat...

[ Parent | on HN ]
Re:Achieving a Perfect SSL Labs Score with Go by blowski on Sunday May 22, 2016 @12:46PM (#11749248)
That's really useful, thank you.

But my question still stands - why do nginx and Apache not provide the same settings as a configuration option?

[ Parent | on HN ]
Re:Achieving a Perfect SSL Labs Score with Go by stouset on Sunday May 22, 2016 @05:47PM (#11750429)
Because what is implied by those terms changes over time, and minor changes can have major impacts on accessibility by older clients.
[ Parent | on HN ]