Deploying TLS Securely

First, let's just agree that supporting SSLv3 is no longer a good idea, and that all old versions of SSL should be disabled by default. In fact, if I could add one item to the Top 10 Hardcore Securi...

Published Mar 10, 2014

Version 1.0

application delivery

ASM Advanced WAF

Ret. Employee

Joined March 13, 2008

Ret. Employee

Joined March 13, 2008

Icon for Cirrus rank

Cirrus

Mar 12, 2014

Hi, small syntax correction, cipher string needs to include a colon ":" before the strength:

NATIVE:!SSLv3:!TLSv1:!EXPORT:!DH:!MD5:!RC4:RSA+AES:RSA+3DES:ECDHE+AES:ECDHE+3DES:ECDHE+RSA:@STRENGTH