Re: security scores and TLS config

2018-07-10 Thread jstephens
Thanks Ray, the SSL Configuration Generator looks really good and modern config is what I was looking for, I guess. Posted at Nginx Forum: https://forum.nginx.org/read.php?2,280475,280487#msg-280487 ___ nginx mailing list nginx@nginx.org http://mailma

Re: security scores and TLS config

2018-07-10 Thread Maxim Konovalov
Hi Jay, On 10/07/2018 15:07, jstephens wrote: > Hello, > With some experience in F5 and NetScaler world but still new to Nginx I have > been tasked with migrating 50+ public URLs to NGINX Plus configured as > keepalived HA pair. What would be best SSL configuration to achieve highest > security s

Re: security scores and TLS config

2018-07-10 Thread Ray Cote
On Tue, Jul 10, 2018 at 8:07 AM, jstephens wrote: > What would be best SSL configuration to achieve highest > security scores from Qaulys SSLLabs or BitSight ? Can someone recommend or > share current best SSL config ? > Recommend you start with the Mozilla TLS configuration page. Mozilla Moder

security scores and TLS config

2018-07-10 Thread jstephens
Hello, With some experience in F5 and NetScaler world but still new to Nginx I have been tasked with migrating 50+ public URLs to NGINX Plus configured as keepalived HA pair. What would be best SSL configuration to achieve highest security scores from Qaulys SSLLabs or BitSight ? Can someone reco