Hi justin,
> even though I am using all the recommend settings.
which recommended settings? recommended by whom?
i learned that, from ssllabs-view, only the cipher-suites recommended by
ivan ristic seem to work: http://www.mare-system.de/guide-to-nginx-ssl-spdy-hsts/#perfect-forward-secrecy
all other cipher-suites i found "somewhere" that should enable PFS dont seem to work,
at least for sslabs.
problem is: there is no other way (that i know of) than ssllabs to check your server-settings
and check PFS.
but PFS also depends on your openssl-version.
regards,
mex