The FREAK crypto downgrade attack

Mozilla has a nice UI to help server admins set secure ciphers at https://mozilla.github.io/server-side-tls/ssl-config-gene... with options for how old the browsers you support are. All their options disable the EXPORT ciphers.

The LWN admins may want to take a look at it, according to https://www.ssllabs.com/ssltest/analyze.html?d=lwn.net there are a few improvements that could be made. :)