Andrey Nechaev AVNechaev

AVNechaev / gist:b88e7e992b166e47ebccc1fd15e7bc42

Created February 27, 2023 11:18 — forked from ferd/gist:af9abf6b3600d2d7f08dba58fdfb514a

	Originally from: http://erlang.org/pipermail/erlang-questions/2017-August/093170.html

	For a safe and fast Erlang SSL server, there's a few
	configuration values you might want by default:

	[{ciphers, CipherList}, % see below
	{honor_cipher_order, true}, % pick the server-defined order of ciphers
	{secure_renegotiate, true}, % prevent renegotiation hijacks
	{client_renegotiation, false}, % prevent clients DoSing w/ renegs
	{versions, ['tlsv1.2', 'tlsv1.1']}, % add tlsv1 if you must