diff --git a/SECURITY.md b/SECURITY.md index 16e3e50..41b70ef 100644 --- a/SECURITY.md +++ b/SECURITY.md @@ -16,6 +16,7 @@ This Gitea instance is configured following best practices, in order to thwart l - Any plain-text (HTTP) traffic is redirected to the TLS secure counterpart (HTTPS). - TLS (or more specifically: TLSv1.2 and TLSv1.3) is used for transit encryption - with HSTS and the following ciphers: + ``` ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-CHACHA20-POLY1305:AES-256-GCM-SHA384:EECDH+AESGCM:EDH+AESGCM - OCSP stapling is enabled.