About

Although these settings provide maximum security they might also have the side effect of breaking backward compatibility with applications that have not been upgraded to support the latest bleeding edge security. That being said the configurations should be used with caution when backward compatibility might be preferred such as E-Mail systems (postfix, dovecot, Cyrus IMAP, etc).

The following is an archive of Remy van Elst' Cipherli.st (Darknet) that documents how to configure various servers to use only the strongest encryption cipher configuration. The rationale used is the following:

Index