Skip to content
This repository has been archived by the owner on Feb 27, 2022. It is now read-only.

Latest commit

 

History

History
19 lines (13 loc) · 484 Bytes

README.md

File metadata and controls

19 lines (13 loc) · 484 Bytes

hardhttps

Make an https server that is more resistant to client-initiated renegotiations, and other common security mistakes.

Not quite an A+ yet, but getting there.

Usage

var https = require('hardhttps')
https.createServer(options, handler)

The API is exactly the same as the built-in https module, but createServer is a little bit tweaked:

  1. If the secureConnection socket has an error, then it is destroyed.
  2. Only the finest TLS ciphers are used.