Good mod_ssl SSLCipherSuite

uopjohnson · 12-01-2005, 05:47 PM

I'm trying to make sure that I'm only running strong encryption on my mod_ssl apache site. Is there a good breakdown of all the portions of the SSLCipherSuite command and all of the different encryption standards. I feel like this is something I could get lost in, and I'm hoping for a quick explanation as I have a lot on my plate already.

edit//
if I just use SSLCipherSuite: High am I covered?

uopjohnson · 12-01-2005, 06:41 PM

OK so I found it, I think. If I just use
SSLCipherSuite HIGH:MEDIUM
then i will be using the "seven strongest ciphers"
from mod_ssl howto is this sufficient? What is the disadvantage of leaving of the MEDIUM and just using HIGH?