GitLab

GitLab.com and Logjam

Jun 17, 2015Marin Jankovski
GitLab.com and Logjam
SummaryAI, from the source post

This post details the decision to remove DHE suites from GitLab.com's cipher suite, prioritizing ECDHE for forward secrecy with major browsers and clients, while acknowledging the impact on older clients like Android 2.3.7, Java 6, and OpenSSL 0.9.8. The SSL Labs score improved from B to A. Recommended configurations for omnibus-gitlab packages and GitLab installations from source were also updated.

More from the SSL/TLS Security Enhancements trail