On Sat, 21 Feb 2015 10:49:21 +0100 Kurt Roeckx <k...@roeckx.be> wrote: > If you just change it to prefer the default server ordering you > should already have a decent list, but it prefers AES256 over > AES128 while there is no need for that.
AFAICT EFF disagrees: https://www.eff.org/deeplinks/2015/04/effs-updated-ssl-configuration -- GPG: 0x138E41915C7EFED6
signature.asc
Description: This is a digitally signed message part.