ProtonBlog(new window)
Subscribe by RSS

SSL and TLS Ciphers

Andy Yen(new window)

Share this page

To further protect the Proton Community, Proton Mail utilizes only high-strength ciphers for SSL and TLS.

We are posting our ciphersuite configurations for Postfix and Apache here for reference, we recommend all system administrators adopt these settings for better security.

Postfix ( main.cf )

smtpd_tls_mandatory_protocols = SSLv3, TLSv1

smtpd_tls_mandatory_ciphers = high

Apache ( ssl.conf )

SSLProtocol -ALL +SSLv3 +TLSv1

SSLCipherSuite HIGH:!aNULL:!MD5

Finally, a quick note regarding TLS 1.2, we will transition to this protocol as soon as CentOS supports it.

Protect your privacy with Proton
Create a free account

Related articles

what is a brute force attack
On the subject of cybersecurity, one term that often comes up is brute force attack. A brute force attack is any attack that doesn’t rely on finesse, but instead uses raw computing power to crack security or even the underlying encryption. In this a
Section 702 of the Foreign Intelligence Surveillance Act has become notorious as the legal justification allowing federal agencies like the NSA, CIA, and FBI to perform warrantless wiretaps, which sweep up the data of hundreds of thousands of US citi
In response to the growing number of data breaches, Proton Mail offers a feature to paid subscribers called Dark Web Monitoring. Our system checks if your credentials or other data have been leaked to illegal marketplaces and alerts you if so. Often
Your email address is your online identity, and you share it whenever you create a new account for an online service. While this offers convenience, it also leaves your identity exposed if hackers manage to breach the services you use. Data breaches
proton pass f-droid
Our mission at Proton is to help usher in an internet that protects your privacy by default, secures your data, and gives you the freedom of choice. Today we’re taking another step in this direction with the launch of our open source password manage
chrome password manager
You likely know you should store and manage your passwords safely. However, even if you are using a password manager, there’s a chance the one you’re using isn’t as secure as it could be. In this article we go over the threats some password managers