From 16c1b3541fa849f9a516b098edc63a92985a1914 Mon Sep 17 00:00:00 2001 From: Daniel Lewart Date: Sat, 1 Aug 2026 05:15:55 -0500 Subject: [PATCH] Rename TLS curves to TLS groups and use preferred names --- docs/server-side-tls.html | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/docs/server-side-tls.html b/docs/server-side-tls.html index 7585b1e..347700f 100644 --- a/docs/server-side-tls.html +++ b/docs/server-side-tls.html @@ -532,7 +532,7 @@

Modern compati
  • Cipher suites (TLS 1.2): (none)
  • Protocols: TLS 1.3
  • Certificate type: ECDSA (P-256)
    • -
  • TLS curves: X25519MLKEM768, X25519, prime256v1, secp384r1
    • +
  • TLS groups: X25519MLKEM768, x25519, secp256r1, secp384r1
  • HSTS: max-age=63072000 (two years)
  • Certificate lifespan: 90 days
  • Cipher preference: client chooses
    • @@ -560,7 +560,7 @@

    Intermedi
  • Cipher suites (TLS 1.3): TLS_AES_128_GCM_SHA256:TLS_AES_256_GCM_SHA384:TLS_CHACHA20_POLY1305_SHA256
  • Cipher suites (TLS 1.2): ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305
  • Protocols: TLS 1.2, TLS 1.3
    • -
  • TLS curves: X25519MLKEM768, X25519, prime256v1, secp384r1
    • +
  • TLS groups: X25519MLKEM768, x25519, secp256r1, secp384r1
  • Certificate type: ECDSA (P-256) (recommended), or RSA (2048 bits)
  • DH parameter size: 2048 (ffdhe2048, RFC 7919)
  • HSTS: max-age=63072000 (two years)