About this website

I take pride in making my website perform as well as it possibly could, while staying practical about it.

Type What?
DNSSEC Algorithm 13: ECDSA Curve P-256 with SHA-256
IP Protocols IPv6 (soon anycasted again)
IPv4 (soon anycasted)
Running on nginx (mainline)
Built with Grav
Backed by PHP 7.3
Protocol negotiation methods ALPN, NPN.
Communication Protocols HTTP/3 (over QUIC)
HTTP/2 (& SPDY/3.1)
HTTP/1.1
HTTP/1
Compression methods (resources only) gzip (static and dynamic)
brotli (static and dynamic)
TLS Required Yes, full redirect with HSTS-header. Subdomains included.
TLS Dynamic Record Sizing Disabled. Enabled, from 1369 to 4229 bytes. Max buffer is 16k.
TLS Ciphers (TLSv1.3) AES-128-GCM-SHA256 (fastest for desktops)
AES-256-GCM-SHA384
CHACHA20-POLY1305-SHA256 (fastest for mobile)
TLS Ciphers (TLSv1.2) EECDH+AESGCM
EDH+AESGCM
AES256+EECDH
AES256+EDH
TLS Certificate Provider Let's Encrypt (Main)
Buypass (Fallback)
TLS Certificate CAA-record Enabled. Secured with DNSSEC.
TLS Certificate Types 384-bit Elliptic Curve with SHA256+RSA signature.
TLS Certificate TLSA/DANE Enabled (Setting: '1 1 1').
TLS Certificate OCSP Stapling Enabled.
TLS ECDH Curves secp384r1
x25519