We’ve gone HTTPS

I’ve wanted to add an SSL certificate to mmoliver.org for a while but frankly I didn’t want to pay the yearly fees of $40+ dollars for one. I then found that I could get a free SSL cert from startssl.com and use it here on the site. It’s a yearly free certificate for personal sites. I’ve setup SSL certs over the years for customer sites but had to sacrifice insecurity for accessibility to their sites. With the recent ‘Poodle’ and other vulnerabilities that have been recently discovered I decided that I should remove SSLv3 support, all the lower export ciphers and RC4.

SSLProtocol All -SSLv2 -SSLv3
SSLCipherSuite ALL:!ADH:!EXPORT56:!RC4+RSA:+HIGH:+MEDIUM:+LOW:!SSLv2:!SSLv3:+EXP

SSL Labs was very helpful in checking the site and ensuring my site would stop using the old protocols and ciphers. Check the site out.

This entry was posted in Uncategorized. Bookmark the permalink.