Hacker News
new
|
past
|
comments
|
ask
|
show
|
jobs
|
submit
login
devx
on April 25, 2014
|
parent
|
context
|
favorite
| on:
Is Your Site HSTS Enabled?
In 2014, everyone who uses https should enable PFS (ECDHE) and HSTS, at the very least.
eliot_sykes
on April 25, 2014
[–]
If you're on shared hosting, is it down to the hosting company to enable Forward Secrecy? Are there any shared hosts doing this yet?
gellerb
on April 25, 2014
|
parent
[–]
Elastic Loading Balancing for AWS customers & Heroku allow for perfect forward secrecy and Akamai customers can expect ECDHE in Q3 of this year.
eliot_sykes
on April 25, 2014
|
root
|
parent
[–]
Is there anything you need to do to enable it on Heroku, other than setup SSL/TLS?
gellerb
on April 25, 2014
|
root
|
parent
[–]
ssl:endpoint add-on
Guidelines
|
FAQ
|
Lists
|
API
|
Security
|
Legal
|
Apply to YC
|
Contact
Search: