<div dir="ltr"><div class="gmail_default" style="font-family:garamond,serif"><span style="font-family:arial,sans-serif">On Tue, Jul 10, 2018 at 8:07 AM, jstephens </span><span dir="ltr" style="font-family:arial,sans-serif"><<a href="mailto:nginx-forum@forum.nginx.org" target="_blank">nginx-forum@forum.nginx.org</a>></span><span style="font-family:arial,sans-serif"> wrote:</span><br></div><div class="gmail_extra"><div class="gmail_quote"><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-style:solid;border-left-color:rgb(204,204,204);padding-left:1ex">What would be best SSL configuration to achieve highest<br>
security scores from Qaulys SSLLabs or BitSight ?  Can someone recommend or<br>
share current best SSL config ?  <br></blockquote><div class="gmail_default" style="font-family:garamond,serif"><br></div><div class="gmail_default" style="font-family:garamond,serif">Recommend you start with the Mozilla TLS configuration page.</div><div class="gmail_default" style="font-family:garamond,serif">Mozilla Modern is the way to go (assuming all your clients use new enough browsers).</div><div class="gmail_default" style="font-family:garamond,serif">    <a href="https://wiki.mozilla.org/Security/Server_Side_TLS">https://wiki.mozilla.org/Security/Server_Side_TLS</a></div><div><span style="font-family:garamond,serif">--Ray</span> </div></div>
</div></div>