updating TLS cert on tahoe-lafs.org

Brian Warner warner at lothar.com
Fri Nov 14 20:00:40 UTC 2014


On 11/14/14 10:40 AM, Brian Warner wrote:
> 
> I'm about to update the TLS cert on https://tahoe-lafs.org .

The update is complete. Everything seems to look ok.. please let me know
if you run into any problems (unless you're running IE6 on WinXP, in
which case please accept my apologies and then get a newer browser :). I
left the non-forward-secure 3DES suite enabled for now, so if you're
really into obsolete browsers, you can still use IE8 on WinXP. We'll
probably drop this one next year.

I've also update our HSTS (HTTP Strict Transport Security) timer to 200
days. This wins us an A+ from the Qualys SSL Server Test:

 https://www.ssllabs.com/ssltest/analyze.html?d=tahoe-lafs.org

cheers,
 -Brian


More information about the tahoe-dev mailing list