Best cipher suite


#1

Hello what’s the best cipher suite that i should use ? :slight_smile:


#2

I’d suggest using https://mozilla.github.io/server-side-tls/ssl-config-generator/ which will give you a good set of ciphers for what you choose ( it depends how many browsers etc you want to support).


#3

Thank you, but it isn´t what i want. I have enabled only TLSv1.2 and 4096 bit key size. I want best encryption for latest browsers.


#4

I’m slightly confused, as that’s exactly what that link will provide if you select “modern” on the options ( rather than intermediate or old which would include ciphers for old browsers such as those on Windows XP )


#5

The “modern” cipher suite is TLSv1.2-only and doesn’t contain any ciphers I’d call unsafe.


#6

oh, Thank you :slight_smile: i will try it :slight_smile:


#7

Thank you for the informations about it. :slight_smile:


#8

Keep in mind that Mozilla’s “Modern” ciphers may cause you unexpected issues. For example, ownCloud’s mobile app won’t work with it (“TLS Initialisation failed” error).

If that happens, you can use the “intermediate” ciphers, or figure out what you’re specific device/app needs and add it to the list :slight_smile: