You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Is your feature request related to a problem? Please describe.
Would like the ability to disable Weak Cyphers via gui if possible.
Describe the solution you'd like
Show the Ciphers Used in Registration or After Registration and allow us to disable the Weak ones and or remove them as some of the other reverse proxies have already done. (Caddy for Example)
Describe alternatives you've considered
Option A: hard removal by you (which is probably something worth considering as its already pretty good out of the box but this can get alot of people to A+ SSL Security on SSLLabs without thinking about it and button up a common attack vector
Option B: Some way to disable on registration in advanced menu:
Is your feature request related to a problem? Please describe.
Would like the ability to disable Weak Cyphers via gui if possible.
Describe the solution you'd like
Show the Ciphers Used in Registration or After Registration and allow us to disable the Weak ones and or remove them as some of the other reverse proxies have already done. (Caddy for Example)
Specifically:
TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA (0xc013) ECDH secp521r1 (eq. 15360 bits RSA) FS WEAK 128
TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA (0xc014) ECDH secp521r1 (eq. 15360 bits RSA) FS WEAK 256
TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA (0xc012) ECDH secp521r1 (eq. 15360 bits RSA) FS WEAK 112
Describe alternatives you've considered
Option A: hard removal by you (which is probably something worth considering as its already pretty good out of the box but this can get alot of people to A+ SSL Security on SSLLabs without thinking about it and button up a common attack vector
Option B: Some way to disable on registration in advanced menu:
Show list of the ciphers in gui::
https://caddyserver.com/docs/caddyfile/directives/tls
https://caddyserver.com/docs/caddyfile/directives/tls#ciphers
Option C: Using Existing Acme Registration submenu:
Cyphers that will be used is shown or we can type list of accepted cyphers like an advanced header in a text box
https://caddyserver.com/docs/caddyfile/directives/tls#ciphers
Additional context
Add any other context or screenshots about the feature request here.
The text was updated successfully, but these errors were encountered: