[Ach] ELB SSL recommendations
t at toolmantim.com
Sun May 25 13:07:43 CEST 2014
Many of us on EC2 are now using ELB instead of Nginx/Apache for SSL termination. It'd be great to see an up-to-date recommended SSL configuration for ELB.
AWS updated their own recommended security policies for ELB in February, mostly for perfect forward secrecy:
I'd love to see their recommended pre-baked policy (ELBSecurityPolicy-2014-01) peer reviewed, and/or a recommended security policy included in ACH.
More information about the Ach