GitLab.com and Logjam
Jun 17, 2015Marin Jankovski

Summary
This post details the decision to remove DHE suites from GitLab.com's cipher suite, prioritizing ECDHE for forward secrecy with major browsers and clients, while acknowledging the impact on older clients like Android 2.3.7, Java 6, and OpenSSL 0.9.8. The SSL Labs score improved from B to A. Recommended configurations for omnibus-gitlab packages and GitLab installations from source were also updated.