Anders Kaseorg c97ca677c9 nginx: Update TLS settings based on Mozilla recommendations 5.0. ...

Disable TLS 1.0 and TLS 1.1.  (We no longer need to support IE8 on
Windows XP.)

Prefer client-selected cipher order.  (Now that all enabled ciphers
provide good security, this allows mobile clients lacking AES hardware
acceleration to pick ChaCha20 for better performance.)

Disable session tickets.  (Mozilla discourages them based on
https://www.imperialviolet.org/2013/06/27/botchingpfs.html.)

Signed-off-by: Anders Kaseorg <anders@zulipchat.com>

2019-07-08 15:51:02 -07:00

..

zulip

nginx: Update TLS settings based on Mozilla recommendations 5.0.

2019-07-08 15:51:02 -07:00

zulip_ops

puppet: Fix hacky release test for whether we're in EC2.

2019-06-25 22:19:04 -07:00