Logjam TLS attack
My side project tries to give secure default settings for all major webservers and other software (like haproxy, mysql, mailservers etc): <a href="https://cipherli.st/" rel="nofollow">https://cipherli.st/</a><p>From the start it has listed the suggestion to set up >2048 DH keys.<p>If you want to test your site for export ciphers, you can try my other side project: <a href="https://tls.so/" rel="nofollow">https://tls.so/</a> - you can also use the SSL labs test but mine is faster for just testing ciphersuite. (And it's open source, so you can use it internally as well).<p>Mozilla also has a good wiki page for SSL settings: <a href="https://wiki.mozilla.org/Security/Server_Side_TLS" rel="nofollow">https://wiki.mozilla.org/Security/Server_Side_TLS</a>