...
We continue to improve our TLS (HTTPS) features and support. Noteworthy in 5.2.x is:
- SSLv3 is now disabled by default!
- Dynamic TLS record size tuning. According to Ilya, this makes us the first server that is all Green.
- Add forward secrecy support with DHE.
- Add ssl_pre_handshake hook for better plugin access to SSL handling.
- Improved session cache, for better performance and scalability.
- New configuration for OpenSSL session cache, proxy.config.ssl.session_cache.auto_clear.
...