Supporting Strong Encryptions

In addition to the basic privacy, integrity, and protection for the data that is transmitted between the client and the server, strong encryptions refer to a TLS implementation which provides all of the following:

• Perfect Forward Secrecy, which ensures that a compromise to the private key of a server in the present does not compromise the confidentiality of past TLS communications.
• Protection from known attacks on older SSL and TLS implementations, such as POODLE and BEAST.
• Support for the strongest ciphers available to modern web browsers and other HTTP clients.
• Rejection of clients that cannot meet these requirements.

The following configuration is in place to support this.

SSLProtocol=TLSv1.2
# Supported Ciphers
SSLCipherSuite=ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA256
SSLHonorCipherOrder=on
SSLCompression=off
SSLSessionTickets=off