759bf84163
Default to use HTTP strict transport security
2014-07-28 14:30:00 +00:00
398036440b
add increased ssl timeout
2014-07-28 14:29:04 +00:00
d996d2da0c
turn off ssl session tickets
...
Stolen from istlsfastyet.com's config
It is probably a more logical default to turn off session tickets
given the diff linked in the comment block.
2014-07-28 14:20:58 +00:00
08d4bbbd04
remove SSLv3 from the ssl protocol list
...
As suggested in #44 , and since h5bp doesn't support IE6 it seems to be
appropriate to remove a protocol which is in the list only to permit use
with IE6.
2014-07-28 14:16:09 +00:00
029ff47286
move ssl config to a seperate file
2014-07-28 14:08:19 +00:00
AD7six