Nginx reverse proxy SSL security issue

Until today the example Nginx reverse proxy config for Etherpad allowed for weaker SSL encryption than is acceptable. You can see if your instance is vulnerable by checking your instances SSL cert Check your Nginx config to see if this line exists: ssl_ciphers ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP; If so replace with: ssl_ciphers “EECDH+ECDSA+AESGCM EECDH+aRSA+AESGCM EECDH+ECDSA+SHA384 EECDH+ECDSA+SHA256 EECDH+aRSA+SHA384 EECDH+aRSA+SHA256 …

Skype and Hangouts alternative

We’re tired of being spied upon and we’re tied of tech companies colluding. With no sign of an end we think it’s time to take control. So.. We’re Introducing an Etherpad instance to serve as an alternative to Microsoft Skype and Google Hangouts, we’re using it internally but we’re inviting you to try it out …

Follow

Get every new post on this blog delivered to your Inbox.

Join other followers: