Non puoi selezionare più di 25 argomenti
Gli argomenti devono iniziare con una lettera o un numero, possono includere trattini ('-') e possono essere lunghi fino a 35 caratteri.
22 righe
814 B
22 righe
814 B
SSLCipherSuite EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:AES256+EDH |
|
SSLProtocol All -SSLv2 -SSLv3 -TLSv1 -TLSv1.3 |
|
SSLHonorCipherOrder On |
|
|
|
# Disable preloading HSTS for now. You can use the commented out header line that includes |
|
# the "preload" directive if you understand the implications. |
|
Header always set Strict-Transport-Security "max-age=63072000; includeSubDomains; preload" |
|
Header always set X-Frame-Options DENY |
|
Header always set X-Content-Type-Options nosniff |
|
|
|
# Requires Apache >= 2.4 |
|
SSLCompression off |
|
SSLUseStapling on |
|
SSLStaplingCache "shmcb:logs/stapling-cache(150000)" |
|
|
|
# Prevent browsers from failing if an OCSP server is temporarily broken. |
|
SSLStaplingReturnResponderErrors off |
|
SSLStaplingErrorCacheTimeout 60 |
|
SSLStaplingStandardCacheTimeout 36000 |
|
|
|
# Requires Apache >= 2.4.11 |
|
SSLSessionTickets Off
|
|
|