Coming soon - Get a detailed view of why an account is flagged as spam!
view details

This post has been de-listed

It is no longer included in search results and normal feeds (front page, hot posts, subreddit posts, etc). It remains visible only via the author's post history.

5
Why does Traefik support so few "secure" rated cipher suites?
Post Body

I host a couple of services for myself, my family, and a few friends. They all use state-of-the-art devices, and I aimed to achieve an SSLlabs rating of A . I successfully reached this goal, but in the process, I became involved in cipher suites and their security ratings. Drawing on my knowledge from my college course in Cryptography and the list from ciphersuite.info, I created the following list of suites for my Traefik.

#- "TLS_ECDHE_ECDSA_WITH_AES_128_CCM"           # Secure - supported by Traefik No
#- "TLS_ECDHE_ECDSA_WITH_AES_128_CCM_8"         # Secure - supported by Traefik No
#- "TLS_ECDHE_ECDSA_WITH_AES_256_CCM"           # Secure - supported by Traefik No
#- "TLS_ECDHE_ECDSA_WITH_AES_256_CCM_8"         # Secure - supported by Traefik No

- "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256"       # Secure - supported by Traefik Yes
- "TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384"       # Secure - supported by Traefik Yes

#- "TLS_ECDHE_PSK_WITH_AES_128_CCM_SHA256"      # Secure - supported by Traefik No
#- "TLS_ECDHE_PSK_WITH_AES_128_CCM_8_SHA256"    # Secure - supported by Traefik No

#- "TLS_ECDHE_RSA_WITH_ARIA_128_GCM_SHA256"     # Secure - supported by Traefik No
#- "TLS_ECDHE_RSA_WITH_ARIA_256_GCM_SHA384"     # Secure - supported by Traefik No

#- "TLS_ECDHE_RSA_WITH_CAMELLIA_128_GCM_SHA256" # Secure - supported by Traefik No
#- "TLS_ECDHE_RSA_WITH_CAMELLIA_256_GCM_SHA384" # Secure - supported by Traefik No

- "TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256" # Secure - supported by Traefik Yes

Initially, I thought there would be no problem, but later, I realized that Traefik only supports only 3 of them. At this point, my question is: Why? Is there any chance that Traefik v3 will support more of them?

Author
Account Strength
90%
Account Age
7 years
Verified Email
Yes
Verified Flair
No
Total Karma
3,171
Link Karma
1,089
Comment Karma
1,952
Profile updated: 4 days ago
Posts updated: 2 weeks ago

Subreddit

Post Details

We try to extract some basic information from the post title. This is not always successful or accurate, please use your best judgement and compare these values to the post title and body for confirmation.
Posted
11 months ago