On Fri, Apr 27, 2012 at 2:29 PM, Jack Bauer <mlsubscri...@gmail.com> wrote:
> Currently I don't know, if the type of DH parameters can be configured > in nginx. But I will investigate .. > > The only solution (for us, at the moment) seems to be to keep kEDH > enabled and hope, that most browsers will use ECDHE_RSA in the future. > Presumably you can configure the ciphersuites to use (ECDHE and EDH are separate sets ciphersuites), including something like "-kEDH" in your ciphersuite specification. Bodo
