AdguardTeam / AdguardTeam/AdGuardHome

More TLS/SSL settings

未關閉
#3,000 0 則留言 8 個 reaction 已指派 0 人 在 GitHub 檢視
feature request P3: Medium
主要語言
TypeScript
星號
36.9k
分支
2.5k
PR 合併指標
30 天內沒有已合併 PR

描述

Hello,

please, consider to add more TLS/SSL settings such as:
1. TLS 1.3 + only strong curves & ciphers mode (strictly);
2. "Compatibility" mode (TLS 1.3 + TLS 1.2 + all curves & ciphers for most clients);
3. Disable "weak" and outdated curves & ciphers;
4. TLS Fallback (SCSV) control (not sure about this);
5. SSL compression and tickets options;
6. SSL handshake options (reject handshake if servername is not match);
7. Stapling and revocation checks;
8. Control ciphers lists like in NGINX (manually), server-preferred order and prioritization. Something like that:
![image](https://user-images.githubusercontent.com/45385632/115840768-b3f6b580-a424-11eb-94b2-fa9f22c64014.png)

Thank you.
Cheers😜

貢獻指南

開啟貢獻指南

評估

這個 Issue 還沒有評估資料。

把新 issue 寄到你的電子郵件信箱

精選適合新手參與的 GitHub issue 摘要。