ProVide is secure out of the box, but if you want to push its HTTPS configuration as far as it will go — including a perfect (“A+”, 100/100/100/100) result on the Qualys SSL Labs official test — you can. At a high level, a maximum-security setup means:
- A strong purchased certificate — RSA-4096 or ECDSA-P384
- Restricting the server to modern protocols only — TLS 1.2 and TLS 1.3 — with the older ones switched off
- Prioritising strong, forward-secret cipher suites and modern key-exchange curves, including X25519
- Enabling HTTP Strict Transport Security (HSTS) and serving the complete certificate chain
Our step-by-step guide walks through the exact settings.ini changes — curves, protocols and cipher lists — for both certificate types:
