Forum Discussion
bkhowson
Nimbostratus
NimbostratusSSLLabs A+, F5 LTM 11.4
We are testing a configuration to achieve an A+ grade on the SSLLabs.com server test.
The "DEFAULT" ciphers is documented in sol13156 and sol13171.
DEFAULT = NATIVE:!MD5:!EXPORT:!DES:!DHE:...
Torti
Cirrus
Cirrusthx to bkhowson!
my settings for 11.5 to get A+:
ECDHE+AES:ECDHE+3DES:RSA+3DES:!SSLv2:!SSLv3:!MD5:!EXPORT:!RC4
disable Renegotiation
insert Strict-Transport-Security header from above in HTTP_RESPONSE
with this, only IE6 is missing.
