syncthing/syncthing — pull request #1102 by calmh (2014-12-09 09:45:47+00:00)
Title: Protect GUI HTTPS from some attacks

- Disable SSLv3 against POODLE
- Disable RC4 as a weak cipher
- Set the CommonName to the system host name

This drops compatibility with IE6 and Java 6 - users of those will have to stick to HTTP, which is honestly about as secure anyway on those browsers.

https://nym.se/t/sslreport.pdf