undefined | Better HN

0 pointsgellerb12y ago0 comments

Yeah. I noticed that paypal.com has a max-age of 4 hours.

0 comments

3 comments · 1 top-level

rhoml12y ago· 2 in thread

Maybe the first step to avoid issues is to enforce SSL which is easy on any webserver before going HSTS.

d0ugie12y ago

Is there any downside, when using SSL, in enabling perfect forward secrecy?

Make sure you're using an SSL library that support ECDHE cipher suites... the non EC suites are very slow.

j / k navigate · click thread line to collapse