This post has been de-listed
It is no longer included in search results and normal feeds (front page, hot posts, subreddit posts, etc). It remains visible only via the author's post history.
I host a couple of services for myself, my family, and a few friends. They all use state-of-the-art devices, and I aimed to achieve an SSLlabs rating of A . I successfully reached this goal, but in the process, I became involved in cipher suites and their security ratings. Drawing on my knowledge from my college course in Cryptography and the list from ciphersuite.info, I created the following list of suites for my Traefik.
#- "TLS_ECDHE_ECDSA_WITH_AES_128_CCM" # Secure - supported by Traefik No
#- "TLS_ECDHE_ECDSA_WITH_AES_128_CCM_8" # Secure - supported by Traefik No
#- "TLS_ECDHE_ECDSA_WITH_AES_256_CCM" # Secure - supported by Traefik No
#- "TLS_ECDHE_ECDSA_WITH_AES_256_CCM_8" # Secure - supported by Traefik No
- "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256" # Secure - supported by Traefik Yes
- "TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384" # Secure - supported by Traefik Yes
#- "TLS_ECDHE_PSK_WITH_AES_128_CCM_SHA256" # Secure - supported by Traefik No
#- "TLS_ECDHE_PSK_WITH_AES_128_CCM_8_SHA256" # Secure - supported by Traefik No
#- "TLS_ECDHE_RSA_WITH_ARIA_128_GCM_SHA256" # Secure - supported by Traefik No
#- "TLS_ECDHE_RSA_WITH_ARIA_256_GCM_SHA384" # Secure - supported by Traefik No
#- "TLS_ECDHE_RSA_WITH_CAMELLIA_128_GCM_SHA256" # Secure - supported by Traefik No
#- "TLS_ECDHE_RSA_WITH_CAMELLIA_256_GCM_SHA384" # Secure - supported by Traefik No
- "TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256" # Secure - supported by Traefik Yes
Initially, I thought there would be no problem, but later, I realized that Traefik only supports only 3 of them. At this point, my question is: Why? Is there any chance that Traefik v3 will support more of them?
Subreddit
Post Details
- Posted
- 11 months ago
- Reddit URL
- View post on reddit.com
- External URL
- reddit.com/r/Traefik/com...