On Sun, Dec 18, 2011 at 8:28 PM, Arno Töll <atoell-guest at alioth.debian.org> wrote: > + ssl.ciphers = "ECDHE-RSA-AES256-SHA384:AES256-SHA256:RC4:HIGH:!MD5:!aNULL:!EDH:!AESGCM" Why isn't the upstream ssl.ciphers default updated? It's not right to hard-code a list of ciphers. -- Olaf