Skip to content

Preferred Server Cipher(s) are misleading #13

@tyll

Description

@tyll

If a TLS server does not have a cipher preference, it uses the first client's cipher that it supports. Therefore it is actually not a preferred server cipher in this case. For example for apache/mod_ssl, the following setting needs to be set to make the server have preferred ciphers:

SSLHonorCipherOrder on

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions