Update SECURITY.md: add break

This commit is contained in:
Jeroen 2022-08-23 11:35:48 +02:00
parent 506581fc61
commit 26b5d4ea7d
Signed by: jeroen
GPG Key ID: 7C7028F783798BAB

View File

@ -28,6 +28,7 @@ This Gitea instance is configured following best practices, in order to thwart l
- Backups are made every 24 hours, using a 'pull mechanism'. This server does **NOT** have access to the backup repository. - Backups are made every 24 hours, using a 'pull mechanism'. This server does **NOT** have access to the backup repository.
- SSH is hardened (PKI authentication, MFA via hardware tokens). - SSH is hardened (PKI authentication, MFA via hardware tokens).
- SSH ciphers are hardened, these are in use: - SSH ciphers are hardened, these are in use:
``` ```
Ciphers chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes256-ctr Ciphers chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes256-ctr
KexAlgorithms curve25519-sha256@libssh.org,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512 KexAlgorithms curve25519-sha256@libssh.org,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512