{"action":"created","issue":{"url":"https://api.github.com/repos/deis/deis/issues/3097","labels_url":"https://api.github.com/repos/deis/deis/issues/3097/labels{/name}","comments_url":"https://api.github.com/repos/deis/deis/issues/3097/comments","events_url":"https://api.github.com/repos/deis/deis/issues/3097/events","html_url":"https://github.com/deis/deis/issues/3097","id":57734163,"number":3097,"title":"Proposal: Increase SSL Security in deis-router","user":{"login":"Blystad","id":324506,"avatar_url":"https://avatars.githubusercontent.com/u/324506?v=3","gravatar_id":"","url":"https://api.github.com/users/Blystad","html_url":"https://github.com/Blystad","followers_url":"https://api.github.com/users/Blystad/followers","following_url":"https://api.github.com/users/Blystad/following{/other_user}","gists_url":"https://api.github.com/users/Blystad/gists{/gist_id}","starred_url":"https://api.github.com/users/Blystad/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/Blystad/subscriptions","organizations_url":"https://api.github.com/users/Blystad/orgs","repos_url":"https://api.github.com/users/Blystad/repos","events_url":"https://api.github.com/users/Blystad/events{/privacy}","received_events_url":"https://api.github.com/users/Blystad/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/deis/deis/labels/security","name":"security","color":"eb6420"}],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":6,"created_at":"2015-02-15T15:39:38Z","updated_at":"2015-02-24T04:10:36Z","closed_at":null,"body":"Hello,\r\n\r\nWhile I havn't used `deis-router`s SSL support, I guess `deis-router` uses nginx defaults for SSL? Any ideas what that scores on [Quays SSL Test](https://www.ssllabs.com/ssltest/)?\r\n\r\nI stumbled upon this article a way back: [https://raymii.org/s/tutorials/Strong_SSL_Security_On_nginx.html](https://raymii.org/s/tutorials/Strong_SSL_Security_On_nginx.html). Might be worth looking at to increase `deis-router`s SSL configuration.\r\n\r\n- Blystad"},"comment":{"url":"https://api.github.com/repos/deis/deis/issues/comments/75696530","html_url":"https://github.com/deis/deis/issues/3097#issuecomment-75696530","issue_url":"https://api.github.com/repos/deis/deis/issues/3097","id":75696530,"user":{"login":"wenzowski","id":597920,"avatar_url":"https://avatars.githubusercontent.com/u/597920?v=3","gravatar_id":"","url":"https://api.github.com/users/wenzowski","html_url":"https://github.com/wenzowski","followers_url":"https://api.github.com/users/wenzowski/followers","following_url":"https://api.github.com/users/wenzowski/following{/other_user}","gists_url":"https://api.github.com/users/wenzowski/gists{/gist_id}","starred_url":"https://api.github.com/users/wenzowski/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/wenzowski/subscriptions","organizations_url":"https://api.github.com/users/wenzowski/orgs","repos_url":"https://api.github.com/users/wenzowski/repos","events_url":"https://api.github.com/users/wenzowski/events{/privacy}","received_events_url":"https://api.github.com/users/wenzowski/received_events","type":"User","site_admin":false},"created_at":"2015-02-24T04:10:36Z","updated_at":"2015-02-24T04:10:36Z","body":"Next up:\r\n- [ ] [RFC 5489](https://tools.ietf.org/html/rfc5489) 2048 bit ecdhe ciphers\r\n- [ ] [RFC 6797](http://tools.ietf.org/html/rfc6797) strict transport security\r\n- [ ] [RFC 6960](https://tools.ietf.org/html/rfc6960) ocsp stapling\r\n- [ ] tune memory consumption of shared [ssl_session_cache](http://nginx.org/en/docs/http/ngx_http_ssl_module.html#ssl_session_cache)"}}