Skip to content

Preferred Server Cipher(s) are misleading #13

@tyll

Description

@tyll

If a TLS server does not have a cipher preference, it uses the first client's cipher that it supports. Therefore it is actually not a preferred server cipher in this case. For example for apache/mod_ssl, the following setting needs to be set to make the server have preferred ciphers:

SSLHonorCipherOrder on

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type
    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions