News for hackers. Stuff that matters.

A comment on The future of Nginx: Getting back to our open source roots. Parent comment

Re:The future of Nginx: Getting back to our open source roots by simon04 on Wednesday August 24, 2022 @02:34PM (#32583811)
Unless you want a good HTTPS configuration. The output of https://ssl-config.mozilla.org/#server=nginx is significantly longer than the one for caddy.
[ Parent | on HN ]
Re:The future of Nginx: Getting back to our open source roots by francislavoie on Wednesday August 24, 2022 @07:41PM (#32587382)
FYI that website is outdated and unmaintained. The person who worked on it left Mozilla AFAIK (would love to be proven wrong). See https://twitter.com/CubicleApril/status/1438940565916225545

The correct thing with Caddy is to _not configure anything at all_ for TLS. The defaults are the correct thing to use. If you override the defaults, then you're more at risk of bitrot due to not remembering to update your own config. Let Caddy (and the Go stdlib, really) choose what's secure.

[ Parent | on HN ]