Hi justin,

> even though I am using all the recommend settings.

which recommended settings? recommended by whom?

i learned that, from ssllabs-view, only the cipher-suites recommended by
ivan ristic seem to work: http://www.mare-system.de/guide-to-nginx-ssl-spdy-hsts/#perfect-forward-secrecy
all other cipher-suites i found "somewhere" that should enable PFS dont seem to work,
at least for sslabs.

problem is: there is no other way (that i know of) than ssllabs to check your server-settings
and check PFS.

but PFS also depends on your openssl-version.


regards,

mex