Re:Getting an A+ on the SSL Labs test in Node.js and Io.js
by davidben on Tuesday March 24, 2015 @12:00PM
(#9257431)
AES_128_GCM is much much preferable to AES_256_CBC. AES_256_GCM does not have broad support (not supported by Chrome or Firefox) and isn't really worth the performance tradeoff.
https://code.google.com/p/chromium/issues/detail?id=442572