Comment by diafygi - Hacker Neue

diafygi Mar 4, 2015 parent

Here's the how we get an A+ rating[1] for nginx on utilityapi.com:

    ssl on;
    ssl_certificate my_ssl.crt;
    ssl_certificate_key my_ssl.key;
    ssl_session_timeout 5m;
    ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
    ssl_ciphers EECDH+aRSA+AES256:EDH+aRSA+AES256:EECDH+aRSA+AES128:EDH+aRSA+AES128;
    ssl_session_cache shared:SSL:50m;
    ssl_prefer_server_ciphers on;
    add_header Strict-Transport-Security max-age=63072000;

Our configuration doesn't support for IE6 or IE8 on Windows XP, but that's the only downside. Also, this configuration has 100% forward secrecy :)

Finally, you can get an A+ rating for free with StartSSL's free option, then using the SHA2 intermediate certificate[2]. This is what I use for my pgp keyserver[3].

[1]: https://www.ssllabs.com/ssltest/analyze.html?d=utilityapi.co...

[2]: https://www.startssl.com/certs/class1/sha2/pem/

[3]: https://www.ssllabs.com/ssltest/analyze.html?d=sks.daylightp...

rakoo Mar 4, 2015

The problem here is not "how to have a secure configuration", it's really "why is it not secure by default"; we actually need more "secure by default" because it largely reduces the chances of doing it wrong.

tombrossman Mar 4, 2015

You can keep your A+ and add IE8 on XP, plus boost your key exchange to 100%[0], by following Mozilla's TLS docs[1] and sticking with the default Intermediate ciphersuite.

You might also consider disabling server tokens to hide your Nginx version (server_tokens off;) for a bit of 'security through obscurity' and enabling SPDY (listen 443 ssl spdy;) for a performance boost.

Also worth pointing out is the upcoming Let's Encrypt project[2] which will make domain validated certificates free soon.

[0]https://www.ssllabs.com/ssltest/analyze.html?d=brossmanit.co... [1]https://wiki.mozilla.org/Security/Server_Side_TLS [2]https://letsencrypt.org/

diafygi OP Mar 4, 2015

I'm not wild about having non-FS options that a man in the middle could force a downgrade to. IE8 on XP isn't worth it.

higherpurpose Mar 4, 2015

I think using Mozilla's "Modern cipher suite" list should do it, and it seems to be all forward secure:

https://wiki.mozilla.org/Security/Server_Side_TLS#Modern_com...

tombrossman Mar 4, 2015

What prevents me from using 'Modern' is it requires Android 4.4+, which excludes a hell of a lot of mobile users. I'm okay with dropping XP support but dropping Android 4.3 and earlier is too limiting for me.

This item has no comments currently.

Preferences

Keyboard Shortcuts

Story Lists

Navigation

Miscellaneous