Conversation

Notices

1. Embed this notice
   Masto.host (mastohost@mastodon.social)'s status on Monday, 16-Jan-2023 21:18:09 JST Masto.host

   in reply to

   • JB Emmons
   • Andrew Leahey
   • Chris Ely
   • Don Cruse

   @doncruse Replied to your email regarding this issue but in short:

   The Mastodon recommended NGINX https://github.com/mastodon/mastodon/blob/main/dist/nginx.conf ranks 'F' on cryptcheck.fr.

   Changing the `nginx.conf` to use the `ssl_ciphers` from Mozilla generator in Intermediate https://ssl-config.mozilla.org/#server=nginx&version=1.17.7&config=intermediate&openssl=1.1.1k&guideline=5.6 will make cryptcheck.fr rank 'A+' but SSL Labs in fact lowered my cipher score ?

   Not sure why or if Mozilla `ssl_ciphers` will cause compatibility issues with older software/others.

   @tcely @IntlLawGnome @andrew

   • Embed this notice
     Don Cruse (doncruse@appellate.social)'s status on Monday, 16-Jan-2023 21:18:15 JST Don Cruse

     in reply to

     • JB Emmons
     • Andrew Leahey
     • Chris Ely

     @tcely @IntlLawGnome @andrew Yes! After my post, I also started poking around on Github. That site does score my instance an "F."

     cc @mastohost

   • Embed this notice
     Chris Ely (tcely@fosstodon.org)'s status on Monday, 16-Jan-2023 21:18:16 JST Chris Ely

     • JB Emmons
     • Andrew Leahey
     • Don Cruse

     So, I looked through the code for that site and found it's using data from this site.

     https://cryptcheck.fr/about

     @doncruse
     @IntlLawGnome @andrew