Forum Discussion
melcaniac
Jun 06, 2017Cirrus
If you are using version 10, you can still get an A- grade without disabling 3DES (so that IE8/XP browsers can still connect). This option is better than DEFAULT:!RC4:!SSLv3 because it prefers to use the 256 bit encryption and drops lower if the client doesn't support it.
Chipher-List (for v10):
!SSLv3:RSA+AES256-SHA256:RSA+AES256-SHA:RSA+AES128-SHA256:RSA+AES128-SHA:RSA+AES128-SHA:RSA+3DES