Skip to content
This repository was archived by the owner on May 28, 2026. It is now read-only.

Releases: mozilla/ssl-config-generator

v6.0 remove "Old" configuration

03 May 04:22

Choose a tag to compare

  • remove "Old" configuration; "Old" configuration is not recommended
    For those who need to reference older guidance, older versions of
    the ssl-config-generator may be obtained from the Internet Archive
    (archive.org)

https://web.archive.org/web/*/https://mozilla.github.io/server-side-tls/ssl-config-generator/

v5.8 major refresh of guidelines

03 May 04:20

Choose a tag to compare

  • summary: first major refresh of guidelines since 2020
  • remove kDHE ciphers from Intermediate and Old;
    recommended ciphers for Intermediate are now all PFS with AEAD
  • change Old dhParamSize from 1024 to 2048 and
    use ffdhe2048 instead of locally generated dhparams
  • remove 'go' and 'caddy' cipher list from guidelines;
    instead use IANA cipher names and supportedCiphers list in
    configs.js to filter ciphers supported by Go crypto/tls module
  • add PQC hybrid KEM X25519MLKEM768 to recommended tls_curves
    for Modern, Intermediate, and Old configurations

v5.7.1 Template additions and improvements

11 Oct 21:42
a93ea76

Choose a tag to compare

🎉 Coturn and stunnel additions, 🐛 ProFTPD and Caddy bug fixes, and tiny Apache and nginx tweaks 🥨

This update focuses mainly on compatibility, thanks to @gene1wood in #215 upgrading to Webpack 5 for broader Node version support — allowing https://ssl-config.mozilla.org to be released via automation now, so all the additions and improvements will be published live immediately from now on! 💨

New server support and changes to existing templates

New Contributors

Full Changelog: v5.7...v5.7.1