I'm using Mozilla's "Old backward compatibility" ssl_ciphers so I feel
good about my compatibility there, but does the following open me up
to potential compatibility problems:
# openssl dhparam -out dhparams.pem 2048
nginx.conf:
ssl_dhparam {path to dhparams.pem}
https://wiki.mozilla.org/Security/Server_Side_TLS
- Grant