Strengthened SSL Security

The SSL configuration on Orpheus has been upgraded (the https part in the website). As such, the site now scores an A+ on the Qualys SSL Server test.

If you are using a modern browser, there will be no difference. If you are using scripts, they may break if not backed by recent crypto libraries.

This upgrade breaks Android 5.0 (Lollipop) and 6.0 (Marshmallow), Safari 8 and below and a few other exotic browsers. Time to upgrade!

Technically, TLS v1.2 and TLS v1.3 are now the only ways to reach the site. TLS v1.0 and TLS v1.1 (and even more ancient protocols) have been switched off. HSTS has also been activated.

There has been no change to the https tracker (home.opsfet.ch).

If you want to check the site on the SSL Server test page, please remember to click the [ ] Hide checkbox.

Discuss this post here