Re: Disable SSLv3 and set cipher list for bozohttpd

Thor Lancelot Simon <[email protected]> Fri, 11 Dec 2015 21:22:58 -0500

Newsgroups	gmane.os.netbsd.devel.security
Message-ID	<[email protected]>

On Thu, Dec 10, 2015 at 12:22:55PM +0100, Jean-Yves Migeon wrote:
>     TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA

For standards compliance you need that one -- at least for the moment,
clients that do not support it are buggy -- but it ought to be last in
the list.

I wouldn't have much trouble picking 3 more.  Make it 5 and it's dead
simple.

Thor