jtan, The connection is encrypted using AES_256_CBC, with SHA1 for message authentication and ECDHE_RSA as the key exchange mechanism. Posted at Nginx Forum: http://forum.nginx.org/read.php?2,256386,256442#msg-256442