332998a2db
use a much longer ssl_session_timeout
...
To match the settiongs from istlsfastyet.com
Add a mention of ssl_buffer_size even though it can 't be enabled yet
2014-07-28 14:56:27 +00:00
72f9509a5e
disable ssl_session_tickets
...
it's only recently added so is a config error otherwise
2014-07-28 14:42:35 +00:00
7295a765ee
add stubs for ssl-stapling and spdy
2014-07-28 14:38:22 +00:00
759bf84163
Default to use HTTP strict transport security
2014-07-28 14:30:00 +00:00
398036440b
add increased ssl timeout
2014-07-28 14:29:04 +00:00
d996d2da0c
turn off ssl session tickets
...
Stolen from istlsfastyet.com's config
It is probably a more logical default to turn off session tickets
given the diff linked in the comment block.
2014-07-28 14:20:58 +00:00
08d4bbbd04
remove SSLv3 from the ssl protocol list
...
As suggested in #44 , and since h5bp doesn't support IE6 it seems to be
appropriate to remove a protocol which is in the list only to permit use
with IE6.
2014-07-28 14:16:09 +00:00
029ff47286
move ssl config to a seperate file
2014-07-28 14:08:19 +00:00
03dc5e07e6
Fix typo
...
Close h5bp/server-configs-nginx#48 .
2014-06-26 22:42:12 +03:00
bf0e3657f9
apply cross-domain changes proposed in #23
...
closes #23
2014-04-08 10:13:29 +00:00
b4d4ebb357
Remove Chrome Frame meta tag. Reference h5bp/server-configs-nginx#2
2013-12-21 17:41:25 +08:00
41e8ef9992
Renamed h5bp.conf to basic.conf README
...
Updated with correct filename.
2013-12-03 23:50:27 +05:30
560bdab9cf
Move config snippets around
...
Make it more obvious which snippets are location based, and which
are just directives. Need to provide more files like basic.conf to
cover more of the common use cases.
2013-11-22 10:50:58 +00:00
e476b08d11
rename conf folder to h5bp
...
The name "conf" is potentially confusing as something which should be inclued
en masse rather than a folder of config snippets.
Closes #13
2013-11-20 18:06:02 +00:00
AD7six