{"action":"created","issue":{"url":"https://api.github.com/repos/h5bp/server-configs-nginx/issues/190","repository_url":"https://api.github.com/repos/h5bp/server-configs-nginx","labels_url":"https://api.github.com/repos/h5bp/server-configs-nginx/issues/190/labels{/name}","comments_url":"https://api.github.com/repos/h5bp/server-configs-nginx/issues/190/comments","events_url":"https://api.github.com/repos/h5bp/server-configs-nginx/issues/190/events","html_url":"https://github.com/h5bp/server-configs-nginx/pull/190","id":297804626,"node_id":"MDExOlB1bGxSZXF1ZXN0MTY5NjM4ODU4","number":190,"title":"Remove deprecated ciphers and protocols","user":{"login":"aeris","id":51246,"node_id":"MDQ6VXNlcjUxMjQ2","avatar_url":"https://avatars0.githubusercontent.com/u/51246?v=4","gravatar_id":"","url":"https://api.github.com/users/aeris","html_url":"https://github.com/aeris","followers_url":"https://api.github.com/users/aeris/followers","following_url":"https://api.github.com/users/aeris/following{/other_user}","gists_url":"https://api.github.com/users/aeris/gists{/gist_id}","starred_url":"https://api.github.com/users/aeris/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/aeris/subscriptions","organizations_url":"https://api.github.com/users/aeris/orgs","repos_url":"https://api.github.com/users/aeris/repos","events_url":"https://api.github.com/users/aeris/events{/privacy}","received_events_url":"https://api.github.com/users/aeris/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":4,"created_at":"2018-02-16T14:34:58Z","updated_at":"2018-11-23T11:14:18Z","closed_at":null,"author_association":"NONE","pull_request":{"url":"https://api.github.com/repos/h5bp/server-configs-nginx/pulls/190","html_url":"https://github.com/h5bp/server-configs-nginx/pull/190","diff_url":"https://github.com/h5bp/server-configs-nginx/pull/190.diff","patch_url":"https://github.com/h5bp/server-configs-nginx/pull/190.patch"},"body":"TLSv1.0 & TLSv1.1 suffer from [POODLE](https://blog.qualys.com/ssllabs/2014/12/08/poodle-bites-tls) and other [padding oracle attack](https://blog.cloudflare.com/padding-oracles-and-the-decline-of-cbc-mode-ciphersuites/)\r\nYou need to support only TLSv1.2 to expect closing those weakness (and use only AEAD cipher suite in case of padding oracle).\r\n\r\nThe same, non PFS cipher suite is not at all recommended (see heartbleed effect).\r\nDHE support [is dropped](https://www.digicert.com/blog/google-plans-to-deprecate-dhe-cipher-suites/) from any decent user agent and can lead to [mitm attack](https://media.ccc.de/v/32c3-7288-logjam_diffie-hellman_discrete_logs_the_nsa_and_you#t=1357) (arround ~25min in the video) with only one side supporting weak cipher suite.\r\n3DES is deprecated and suffer from [sweet32](https://sweet32.info/)\r\n\r\nSo I recommend using only the `EECDH+CHACHA20:EECDH+AES` cipher suite, which has [quite good compatibility](https://cryptcheck.fr/suite/EECDH+CHACHA20:EECDH+AES) and a very better security than the actual cipher suite."},"comment":{"url":"https://api.github.com/repos/h5bp/server-configs-nginx/issues/comments/441214685","html_url":"https://github.com/h5bp/server-configs-nginx/pull/190#issuecomment-441214685","issue_url":"https://api.github.com/repos/h5bp/server-configs-nginx/issues/190","id":441214685,"node_id":"MDEyOklzc3VlQ29tbWVudDQ0MTIxNDY4NQ==","user":{"login":"LeoColomb","id":846943,"node_id":"MDQ6VXNlcjg0Njk0Mw==","avatar_url":"https://avatars1.githubusercontent.com/u/846943?v=4","gravatar_id":"","url":"https://api.github.com/users/LeoColomb","html_url":"https://github.com/LeoColomb","followers_url":"https://api.github.com/users/LeoColomb/followers","following_url":"https://api.github.com/users/LeoColomb/following{/other_user}","gists_url":"https://api.github.com/users/LeoColomb/gists{/gist_id}","starred_url":"https://api.github.com/users/LeoColomb/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/LeoColomb/subscriptions","organizations_url":"https://api.github.com/users/LeoColomb/orgs","repos_url":"https://api.github.com/users/LeoColomb/repos","events_url":"https://api.github.com/users/LeoColomb/events{/privacy}","received_events_url":"https://api.github.com/users/LeoColomb/received_events","type":"User","site_admin":false},"created_at":"2018-11-23T11:14:18Z","updated_at":"2018-11-23T11:14:18Z","author_association":"MEMBER","body":"@aeris Thanks for your PR! 👍 (and sorry for late reply)\r\n\r\nCould you update comments to reflect this change? Thanks!"}}
{"actor":{"display_login":"LeoColomb"}}