OT: Crypto Hardening Guide (nginx has an entry)

For administrators interested in SSL/TLS protocols and ciphers
settings, the following may be useful. It also looks like the
[possibly influenced] US stuff was removed.

https://bettercrypto.org/static/applied-crypto-hardening.pdf