Comment Comment by devx In 2014, everyone who uses https should enable PFS (ECDHE) and HSTS, at the very least. parent devx 12 years ago