Comment on Fighting Cargo Cult – An Incomplete SSL/TLS Bookmark CollectionparentComments−danimoOP12yThat's an excellent reference with good explanations. I'll add it to the list to get away from the strong Ivan bias :-). The reason why I had A- only is that my openssl (Debian) doesn't seem provide all the ciphers required.−puetzk12yIt's probably your apache, actually; 2.2 can't do ECDHE, even though the openssl in Debian 7 can.Sadly, this means IE doesn't get forward secrecy, because it can't do do DHE with RSA keys, only DSS.
Comments
That's an excellent reference with good explanations. I'll add it to the list to get away from the strong Ivan bias :-). The reason why I had A- only is that my openssl (Debian) doesn't seem provide all the ciphers required.
It's probably your apache, actually; 2.2 can't do ECDHE, even though the openssl in Debian 7 can.
Sadly, this means IE doesn't get forward secrecy, because it can't do do DHE with RSA keys, only DSS.