This gist contains the nginx and tor configurations for the [mike.tig.as][mta] servers, mainly to show:
- Use of the chris-lea/nginx-develPPA to allow use of SPDY.
- ssl_ciphersselection to mitigate BEAST attack, enable [perfect forward secrecy][pfs] if possible and select the strongest possible ciphers within those bounds. (Exception is made for several ciphers at the end of list, for compatibility reasons.)