Configure your web server SSL (HTTPS) for forward secrecy and optimum security

I can configure your Apache, nginx, or IIS* Web server for SSL Forward Secrecy and ensure that your site's SSL configuration is PCI-compliant and scores an A on Qualys SSL Labs' SSL Test (ssllabs.com).

If you have never given any thought to your SSL configuration, it is probably not secure against the latest exploits affecting some versions of SSL. The default settings in most servers haven't been updated in years and are no longer ideal.

If you are trying to protect your visitors from eavesdropping by governments, you need to use the latest, most secure ciphers. Some ciphers commonly used by SSL have recently been found to have vulnerabilities that can be practically exploited, enabling a skilled attacker to decrypt and eavesdrop on your communications. Enabling Forward Secrecy adds an extra layer of protection, ensuring every SSL session uses its own cryptographic key -- without FS, an attacker only needs to crack or steal a single key to decrypt any SSL session; past, present, or future.

I can quickly configure your Web server according to current best practices, to ensure that the most secure ciphers are used to encrypt your customers' data, and defend against known exploits. I can make tweaks that will speed up SSL so your server can handle more connections. Your site will score an A on the Qualys SSL Test, and you'll be able to tell your customers that you are doing everything possible to protect their data.

(The SSL Labs score depicted is the best score currently possible while maintaining compatibility with all current major browsers except IE6. IE6 compatibility is possible at the cost of a tiny measure of additional security.)