Provide Perfect Forward Secrecy

This config, which is not mine, but from http://hynek.me/articles/hardening-your-web-servers-ssl-ciphers/ will provide PFS on all tested browsers which are able to do it and all tests at Qualys SSL Labs.