server-configs-nginx/h5bp
Ewout van Mansom 9b369d23a5 Add eleptic curves for modern profile preset
prime256v1 (NIST P-256), secp384r1 (NIST P-384) and secp521r1 (NIST P-521) have been deemed insecure as per Daniel J. Bernstein's research (https://cr.yp.to/newelliptic/nistecc-20160106.pdf, https://safecurves.cr.yp.to/).

Despite that, the adoption of X25519 is too slim. Limiting to that curve would mean dropping compatibility with Safari, Edge and Internet Explorer.
2018-11-30 10:21:38 +01:00
..
cross-origin Split directives to enforce atomic structure 2018-11-23 17:19:51 +01:00
errors Split directives to enforce atomic structure 2018-11-23 17:19:51 +01:00
internet_explorer Split directives to enforce atomic structure 2018-11-23 17:19:51 +01:00
location Merge #202 2018-11-27 21:43:18 +01:00
security Split SSL config 2018-11-29 10:39:33 +01:00
ssl Add eleptic curves for modern profile preset 2018-11-30 10:21:38 +01:00
web_performance Tweaks and lint 2018-11-25 22:07:01 +01:00
README.md Renamed h5bp.conf to basic.conf README 2013-12-03 23:50:27 +05:30
basic.conf Split directives to enforce atomic structure 2018-11-23 17:19:51 +01:00

README.md

Component-config files

Each of these files is intended to be included in a server block. Not all of the files here are used - they are available to be included as required. The basic.conf file includes the rules which are recommended to always be defined.