How do I enable perfect forward secrecy by default on Apache?

Question

Warning: please only use the recommendations for Apache configuration from the answers below. For which cipher(s) to use - security norms change over time a

Answer 1

Have a look at https://cipherli.st

There you find copy & paste config snippets for several services, that should ensure strong ssl security settings.