SSL Archives — Wild Wild Wolf

BREACH (Browser Reconnaissance and Exfiltration via Adaptive Compression of Hypertext) is a security exploit against HTTPS when using HTTP compression. This article shows several ways to deal with BREACH using Length Hiding technique with nginx’s builtin modules.

This article provides a configuration for nginx that successfully passes SSL Labs tests with A or A+ mark, and 100% score for all metrics (certificate, protocol support, key exchange, cipher strength).

This post presents a TLS configuration for nginx to get A+ score in HTBridge and SSL Labs tests. According to HTBridge, this configuration is compliant with PCI DSS, NIST, and HIPAA guidelines.

Wild Wild Wolf

SSL

nginx: Mitigating the BREACH Vulnerability with Perl and SSI or Addition or Substitution Modules

How to Get Maximum Score in SSL Labs Test (nginx)

TLS Configuration for nginx to Get A+ in HTBridge and SSL Labs Tests