On: Getting an A+ on Qualy's SSL Labs Tester

[hannob]

I had created a 100/100/100 and all config perfect test page a while back. It's here: https://fancyssl.hboeck.de/

However you probably can't see it because almost no browser is capable :-) The description is here: https://fancynossl.hboeck.de/

(some info probably outdated, but still gets the all-100%-rating)

[rev → hannob]

Firefox 34.0 on Ubuntu 14.10 is "unable to connect securely: Firefox cannot guarantee the safety of your data on fancyssl.hboeck.de because it uses SSLv3, a broken security protocol. Advanced info: ssl_error_no_cypher_overlap" Strange error, considering you use TLS 1.2 only.

[e12e → hannob]

Interesting. However:

> TLS 1.2 only (...) > Browser support: Getting better, most browsers support TLS 1.2 now, but not all support the stronger AES256 encryption modes.

It's my understanding that AES256 isn't necessarily meaningfully more secure, due to the way AES key schedules work?