diff --git a/server.go b/server.go index 5c2cca50..e38bf795 100644 --- a/server.go +++ b/server.go @@ -224,7 +224,7 @@ func (s *Server) Serve() (err error) { httpsServer.TLSConfig = &tls.Config{ // Only use curves which have assembly implementations // https://github.com/golang/go/tree/master/src/crypto/elliptic - CurvePreferences: []tls.CurveID{tls.CurveP256}, + CurvePreferences: []tls.CurveID{tls.X25519MLKEM768, tls.CurveP256}, // Use modern tls mode https://wiki.mozilla.org/Security/Server_Side_TLS#Modern_compatibility NextProtos: []string{"h2", "http/1.1"}, // https://www.owasp.org/index.php/Transport_Layer_Protection_Cheat_Sheet#Rule_-_Only_Support_Strong_Protocols