1

My site got A+ on all score fields, however, it seems ssllabs.com changed some measures, and the key exchange score is not 100% any more: screenshot

My previous Nginx setting is like this:

          ssl_protocols     TLSv1.2 TLSv1.3;
          ssl_ciphers       ECDH+AESGCM+AES256:ECDH+CHACHA20; # TLSv1.2
          ssl_conf_command  Ciphersuites TLS_AES_256_GCM_SHA384:TLS_CHACHA20_POLY1305_SHA256; # TLSv1.3
          ssl_ecdh_curve    secp384r1;

I already studied the old question, but it seems the settings are outdated and not working anymore. So how to get the key exchange reaches 100% score in 2022?

Moses
  • 11
  • 2

0 Answers0