elaborate a bit on strong cipher configuration

This commit is contained in:
Daniel Micay 2020-12-23 17:48:26 -05:00
parent 26a91a0543
commit 89ba766d85

View File

@ -171,7 +171,8 @@
of our web services, etc.</li>
<li>No proprietary services</li>
<li>Authenticated encryption for all of our services</li>
<li>Strong cipher configurations for all of our services (SSH, TLS, etc.)</li>
<li>Strong cipher configurations for all of our services (SSH, TLS, etc.) with
only modern AEAD ciphers providing forward secrecy</li>
<li>DNSSEC for all our domains</li>
<li>SSHFP across all domains for pinning SSH keys</li>
<li>DANE TLSA records for pinning keys for all our TLS services (unfortunately only