I'm using Mozilla's "Old backward compatibility" ssl_ciphers so I feel good about my compatibility there, but does the following open me up to potential compatibility problems: # openssl dhparam -out dhparams.pem 2048 nginx.conf: ssl_dhparam {path to dhparams.pem} https://wiki.mozilla.org/Security/Server_Side_TLS - Grant