hardhttps
Make an https server that is more resistant to client-initiated renegotiations, and other common security mistakes.
Not quite an A+ yet, but getting there.
Usage
var https = https
The API is exactly the same as the built-in https module, but
createServer
is a little bit tweaked:
- If the secureConnection socket has an error, then it is destroyed.
- Only the finest TLS ciphers are used.