Welcome! Log In Create A New Profile

Advanced

ssl_prefer_server_ciphers

Gena Makhomed
September 09, 2013 05:28AM
Здравствуйте!

директива ssl_prefer_server_ciphers иимеет значение по-умолчанию off.
возможно имеет смысл изменить дефолтовое значение этой директивы в on?

потому что при ssl_prefer_server_ciphers off;
nginx подвержен влиянию BEAST-атаки CVE-2011-3389.

подробности: http://habrahabr.ru/post/173125/
https://www.ssllabs.com/ssltest/ и https://www.ssllabs.com/

при текущем значении по-умолчанию ssl_prefer_server_ciphers
- nginx даже не соответствует требованиям стандарта PCI DSS.

я понимаю, что nginx - это не совсем OpenBSD, но он часть OpenBSD,
и поэтому лучше подход http://www.openbsd.org/security.html#default

--
Best regards,
Gena

_______________________________________________
nginx-ru mailing list
nginx-ru@nginx.org
http://mailman.nginx.org/mailman/listinfo/nginx-ru
Subject Author Posted

ssl_prefer_server_ciphers

Gena Makhomed September 09, 2013 05:28AM

Re: ssl_prefer_server_ciphers

Anton Yuzhaninov September 09, 2013 06:08AM

Re: ssl_prefer_server_ciphers

Gena Makhomed September 09, 2013 07:32AM

Re: ssl_prefer_server_ciphers

Maxim Dounin September 09, 2013 08:36AM

Re: ssl_prefer_server_ciphers

Anatoly Mikhailov September 10, 2013 05:20AM

Re: ssl_prefer_server_ciphers

Anatoly Mikhailov September 11, 2013 12:30PM

Re: ssl_prefer_server_ciphers

Dmitry Ivanov September 11, 2013 02:20PM

Re: ssl_prefer_server_ciphers

Maxim Dounin September 11, 2013 12:56PM

Re: ssl_prefer_server_ciphers

Anatoly Mikhailov September 11, 2013 01:32PM

Re: ssl_prefer_server_ciphers

Maxim Dounin September 11, 2013 02:00PM

Re: ssl_prefer_server_ciphers

Gena Makhomed September 11, 2013 02:32PM

Re: ssl_prefer_server_ciphers

Gena Makhomed September 11, 2013 02:10PM

Re: ssl_prefer_server_ciphers

Anton Yuzhaninov September 12, 2013 05:12AM

Re: ssl_prefer_server_ciphers

Gena Makhomed September 12, 2013 12:40PM

Re: ssl_prefer_server_ciphers

Dmitry Morozovsky September 12, 2013 04:02PM

Re: ssl_prefer_server_ciphers

Gena Makhomed September 12, 2013 04:34PM

Re: ssl_prefer_server_ciphers

Dmitry Morozovsky September 12, 2013 04:38PM

Re: ssl_prefer_server_ciphers

Gena Makhomed September 12, 2013 05:44PM



Sorry, only registered users may post in this forum.

Click here to login

Online Users

Guests: 138
Record Number of Users: 8 on April 13, 2023
Record Number of Guests: 500 on July 15, 2024
Powered by nginx      Powered by FreeBSD      PHP Powered      Powered by MariaDB      ipv6 ready