# Improved TLS Defaults

- Thread: https://externals.io/message/72360
- Original archive: https://news-web.php.net/php.internals/72360
- Started by Daniel Lowrey on 2014-02-07T02:50:35+00:00
- Messages: 1
- Reply by email to internals@lists.php.net
- More for agents: search with https://externals.io/search.md?q={query} · JSON API at https://externals.io/api · documentation at https://externals.io/llms.txt

---

## #72360 — Daniel Lowrey — 2014-02-07T02:50:35+00:00

URL: https://externals.io/message/72360#72360

A couple of final changes to the TLS RFC ...

- Encrypted server streams are now fully capable of forward secrecy (PFS).
I don't know how many people besides myself are really doing serious
production work with encrypted PHP servers but this addition is a big win
for anyone who is :)

https://wiki.php.net/rfc/improved-tls-defaults#forward_secrecy_for_servers

- As per previous discussions on the list the default cipher list is now
basically the same as the Mozilla recommendations

I would encourage anyone who'd like to try out these changes to merge the
patch linked on the RFC page directly into a 5.6 branch:

https://wiki.php.net/rfc/improved-tls-defaults#patches_and_tests

As always, thanks for your time. Voting will begin early/mid next week!

- Daniel