News for hackers. Stuff that matters.

A comment on Getting an A+ on the SSL Labs test in Node.js and Io.js. Parent comment

Re:Getting an A+ on the SSL Labs test in Node.js and Io.js by nailer on Tuesday March 24, 2015 @01:55PM (#9258239)
Thanks. I'm actually porting the Moz guidelines to node in the next few days.
[ Parent | on HN ]
Re:Getting an A+ on the SSL Labs test in Node.js and Io.js by nailer on Monday March 30, 2015 @06:08AM (#9288590)
Done: https://www.npmjs.com/package/ssl-config

As another poster mentions, using AES-GCM with 128 bit keys is considered superior to using a 256 bit key without (though indeed, removing all 128 bit keys gets you 100% on the SSLLabs test).

See https://wiki.mozilla.org/Security/Server_Side_TLS#Prioritiza...

[ Parent | on HN ]