Full threadckuehl·Rather than copy their suggestions for SSL configuration, I think you can probably find better (and more well-maintained) advice on the Mozilla wiki:https://wiki.mozilla.org/Security/Server_Side_TLSView on HN