For Repose 9 (or the next major release), we should decide if we want to change the default include/exclude protocols/ciphers. That may mean defaulting to the same defaults as Jetty, defaulting to whatever is supported by the environment, or defaulting to our own set of defaults.
- We've reached out to Security (NetSec?) to see what the recommendations are these days.
- We've updated the defaults.