nginx

OCSP Stapling on Nginx and Apache webserver

OCSP Stapling on Nginx and Apache webserver
To understand OCSP stapling, it is necessary to understand OCSP, the Online Certificate Status Protocol. OCSP is a protocol for determining whether a certificate is revoked (for instance, becau se its private key was compromised). Every time a browser connects to an HTTPS website, it contacts the OCSP responder specified in the SSL certificate, and asks if the certificate is revoked. If the respond er replies that the certificate is revoked, the browser blocks the page from loading.

Most secure SSL/TLS configuration for Apache, Nginx, Postfix, Dovecot, HAProxy and other

Most secure SSL/TLS configuration for Apache, Nginx, Postfix, Dovecot, HAProxy and other

What is a cipher suite?

Cipher suites decide how secure, compatible and fast your HTTPS website is. A cipher suite is a set of information that helps determine how your web server will communicate secure data over HTTPS.
A web server uses certain protocols and algorithms to determine how it will secure your web traffic. These are the ingredients of a secure connection. A cipher suite is essentially a list of those ingredients.