Am 07.11.2015 um 15:23 schrieb L. Aaron Kaplan: >> Should Apache, Dovecot, nginx, lighttp, etc... CipherStrings be changed >> to match CipherString-B? >> > Yes. See above. OK, did this for Webservers and Mailservers https://github.com/BetterCrypto/Applied-Crypto-Hardening/pull/117