title: Tomcat 7 Ciphers For High Security
body: <p>I'm migrating to Tomcat 7 and figured it was a good time to review the ciphers I'm using for SSL connections.  I realized I set these up about 5 years ago and never thought about them since. </p>
  
  <p>Is my list missing any important ciphers?  Does it include any I shouldn't?</p>
  
  <p>My web application is one where security is important, so erring on the side of caution is preferred.  Support for IE8 is required, international users as well (but not North Korea).</p>
  
  <pre><code>ciphers="TLS_RSA_WITH_AES_128_CBC_SHA, TLS_DHE_RSA_WITH_AES_128_CBC_SHA, 
  TLS_DHE_DSS_WITH_AES_128_CBC_SHA, SSL_RSA_WITH_3DES_EDE_CBC_SHA, 
  SSL_DHE_RSA_WITH_3DES_EDE_CBC_SHA, SSL_DHE_DSS_WITH_3DES_EDE_CBC_SHA"
  </code></pre>