[riteshpatel]

Just compared our SSL config (https://www.theticketfairy.com/) to the one at the end of the article (based on HN recommendations) and pretty happy that it was already set to pretty much exactly that (apart from us having 100m for the SSL session cache rather than 10m) :)

One more thing I'd advise is adding this directive if you're running Nginx 1.3.7 or higher:

ssl_stapling on;

The tech behind this is explained here: http://blog.cloudflare.com/ocsp-stapling-how-cloudflare-just...

Lastly, if you can be bothered to build Nginx 1.4 (1.4.2 is the latest version at the time of writing), you can enable SPDY support as well.