Best nginx configuration for security

server {
listen 443 ssl default deferred;

server_tokens off;
ssl on;
ssl_certificate /etc/nginx/ssl/star_forgott_com.crt;
ssl_certificate_key /etc/nginx/ssl/star_forgott_com.key;
ssl_session_cache builtin:1000 shared:SSL:10m;
ssl_prefer_server_ciphers on;
ssl_session_timeout 5m;
ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
#… the rest of your configuration

The “Breaking Bad” school

“THERE are obvious reasons for watching “Breaking Bad”: for once the Hollywood hype surrounding the television series is justified. But there is also a less obvious reason: it is one of the best studies available of the dynamics of modern business. A Harvard MBA will set you back $90,000 (plus two years’ lost income). You can buy a deluxe edition of all five seasons of “Breaking Bad”, complete with a plastic money barrel, for $209.99, or a regular edition for less than $80.

“Breaking Bad”, whose finale airs on September 29th, takes place in a recession-ravaged America where most people are struggling to get by on stagnant incomes but a handful of entrepreneurs live like kings. The hero, Walter White, is a high-school chemistry teacher with a second job in a car wash. When he is diagnosed with cancer he is also shaken out of his lethargy: he decides to go into the highly lucrative methamphetamine business to pay for his cancer treatment and leave his family a nest-egg…”

What is Bayesian Statistics?

“One of the more noticeable things about our branding is the term “Bayesian.” It is a mathematical approach to statistics that better reflects the way many people think, and it is one that we find a lot easier to understand than the more common or “Frequentist” perspective. Most people don’t know what this approach is though, because of the two major approaches to statistics (Bayesian and Frequentist), Bayesian Statistics is not the one taught at the high school or early college level.

Bayesian statistics is best described through an example. Our example is one really familiar to anyone in the online space – deciding if an Adwords Ad is good. The frequentist approach is the one normally taught in high school and freshman college math classes. To them, there is an objective point to be taken and measured against. For the sake of the discussing here, a frequentist would define the ad as “bad” if it’s click through rate (CTR) is under 0.5% and good if it’s CTR is over 2%…”

Switch to HTTPS Now, For Free

“From now on, you should see a delightful lock next to in your browser’s URL bar, because I’ve switched this site to use HTTPS. I paid $0 for the trouble.

Why you should bother doing the same:

SSL’s not perfect, but we need to make surveillance as expensive as possible
For privacy not to be suspicious, privacy should be on by default
And hey, bonus: more complete referrer information in Google Analytics for people visiting from sites already using HTTPS (like Hacker News).

This post shows how to do your part in building a surveillance-resistant Internet by switching your site to HTTPS. Though it takes a bunch of steps, each one is very simple, and you should be able to finish this in under an hour…”