mirror of
https://github.com/zulip/zulip.git
synced 2025-11-02 21:13:36 +00:00
62f1a9da26
• Specify disabled rather than enabled protocols, so as not to disable TLS 1.3. • Provide an explicit cipher suite list (Mozilla intermediate config version 5.4). • Respect the browser’s preferred cipher suite ordering over the server’s. • Use FFDHE2048 Diffie-Hellman parameters. • Disable SSL session tickets. (SSL stapling is also recommended but SSLStaplingCache cannot be configured inside a <VirtualHost> block.) Signed-off-by: Anders Kaseorg <anders@zulip.com>
Zulip markdown documentation hosted elsewhere
The markdown files in this directory ( /zulip/docs ) are not intended to be read on GitHub. Instead, visit our ReadTheDocs to read the Zulip documentation.