https://etho.wiki/index.php?action=history&feed=atom&title=User_talk%3AChew 2026-05-05T13:22:34Z Revision history for this page on the wiki MediaWiki 1.43.0 https://etho.wiki/index.php?title=User_talk:Chew&diff=432&oldid=prev 2024-06-13T20:04:42Z

<p><span class="autocomment">Website Security: </span> Reply</p> <table style="background-color: #fff; color: #202122;" data-mw="interface"> <col class="diff-marker" /> <col class="diff-content" /> <col class="diff-marker" /> <col class="diff-content" /> <tr class="diff-title" lang="en"> <td colspan="2" style="background-color: #fff; color: #202122; text-align: center;">← Older revision</td> <td colspan="2" style="background-color: #fff; color: #202122; text-align: center;">Revision as of 20:04, 13 June 2024</td> </tr><tr><td colspan="2" class="diff-lineno" id="mw-diff-left-l2">Line 2:</td> <td colspan="2" class="diff-lineno">Line 2:</td></tr> <tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br></td></tr> <tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>Hey, as a sysadmin who really cares super strongly about security I think you should take a look at the server&#039;s supported TLS cipher suites to ensure no TLS downgrade attacks. As it stands right now, it allows for TLS 1.0 and TLS 1.1 which are considered insecure. You may want  to consider disabling them in your server config. Also consider enabling CSP to protect against XSS attacks. If you&#039;re not experienced with any of this stuff, just let me know, I&#039;m happy to help [[User:Thern|Thern]] ([[User talk:Thern|talk]]) 09:41, 13 June 2024 (UTC)</div></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>Hey, as a sysadmin who really cares super strongly about security I think you should take a look at the server&#039;s supported TLS cipher suites to ensure no TLS downgrade attacks. As it stands right now, it allows for TLS 1.0 and TLS 1.1 which are considered insecure. You may want  to consider disabling them in your server config. Also consider enabling CSP to protect against XSS attacks. If you&#039;re not experienced with any of this stuff, just let me know, I&#039;m happy to help [[User:Thern|Thern]] ([[User talk:Thern|talk]]) 09:41, 13 June 2024 (UTC)</div></td></tr> <tr><td colspan="2" class="diff-side-deleted"></td><td class="diff-marker" data-marker="+"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div><ins style="font-weight: bold; text-decoration: none;"></ins></div></td></tr> <tr><td colspan="2" class="diff-side-deleted"></td><td class="diff-marker" data-marker="+"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div><ins style="font-weight: bold; text-decoration: none;">:Thanks for pointing this out. I bumped the minimum TLS to 1.2. [[User:Chew|Chew]] ([[User talk:Chew|talk]]) 20:04, 13 June 2024 (UTC)</ins></div></td></tr> <!-- diff cache key my_wiki:diff:1.41:old-416:rev-432:php=table --> </table>

Chew https://etho.wiki/index.php?title=User_talk:Chew&diff=416&oldid=prev 2024-06-13T09:41:47Z

<p><span class="autocomment">Website Security: </span> new section</p> <p><b>New page</b></p><div>== Website Security ==<br /> <br /> Hey, as a sysadmin who really cares super strongly about security I think you should take a look at the server&#039;s supported TLS cipher suites to ensure no TLS downgrade attacks. As it stands right now, it allows for TLS 1.0 and TLS 1.1 which are considered insecure. You may want to consider disabling them in your server config. Also consider enabling CSP to protect against XSS attacks. If you&#039;re not experienced with any of this stuff, just let me know, I&#039;m happy to help [[User:Thern|Thern]] ([[User talk:Thern|talk]]) 09:41, 13 June 2024 (UTC)</div>

Thern