We have now enabled TLS on our web site and made sure to configure it properly. We can still fine tune a bit, but we’re happy that the Qualys SSL Labs test tool rated our server A in the tests. We have disabled all versions of SSL in our server, thus only supporting TLS. We also followed advice from Bettercrypto.org for our nginx web server to make sure we got the best rating.
The face that we launched on a web site without TLS was the top comment we got from users on Twitter and other social media platforms. We listened and fixed it.
Now we can focus on adding more tests to the test suite again!