Don't know if this was hit on before, I am using the suggestions for ssl_ciphers / SSLCipherSuite from http://blog.rlove.org/2013/12/strong-ssl-crypto.html Yes, older browsers are left out, but those should not be on the Internet anyways ;) Any background reasoning for chosingthe ....CAMELLIA.... cipher list? Greets, Jeroen