ioerror/duraconf — pull request #25 by t2d (2013-09-25 23:15:04+00:00)
Title: Provide Perfect Forward Secrecy

This config, which is not mine, but from http://hynek.me/articles/hardening-your-web-servers-ssl-ciphers/ will provide PFS on all tested browsers which are able to do it and all tests at Qualys SSL Labs.