TLS best practices


Well after groveling around trying to find documentation on the right way to configure TLS, I came up with

Just stashing these link here for next time …