✨ Feature Suggestion | SSL Improvements #897

New Issue

jonah · 2019-05-03T08:23:01Z

ghost commented

2019-05-03 08:23:01 +00:00

(Migrated from github.com)

So just on a whim, I ran Qualys SSL Labs testing on the main site. Although it scored very well, it does not yet support several features, such as using an ECC-based ChaCha20 encrypted cert which is less-cpu intensive, while being stronger and running HPKP with preloading enabled. It also might to be a good idea to disable some of the weaker CBC ciphersuites with TLS 1.2.

Is this possible?

So just on a whim, I ran Qualys SSL Labs [testing](https://www.ssllabs.com/ssltest/analyze.html?d=www.privacytools.io&hideResults=on) on the main site. Although it scored very well, it does not yet support several features, such as using an ECC-based ChaCha20 encrypted cert which is less-cpu intensive, while being stronger and running HPKP with preloading enabled. It also might to be a good idea to disable some of the weaker CBC ciphersuites with TLS 1.2. Is this possible?

jonah commented

2019-05-03 21:07:15 +00:00

HPKP is dead. We can definitely change out the cipher suites though, I'll research that this weekend.

HPKP [is dead](https://groups.google.com/a/chromium.org/forum/#!msg/blink-dev/he9tr7p3rZ8/eNMwKPmUBAAJ). We can definitely change out the cipher suites though, I'll research that this weekend.

This repo is archived. You cannot comment on issues.

1 Participants

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: privacyguides/privacytools.io#897