From 938341ed3d144f08ceb984a778fbe6842dd6f590 Mon Sep 17 00:00:00 2001
From: leeyc0 <leeyc0@users.noreply.github.com>
Date: Sat, 4 Jul 2026 20:44:13 +0800
Subject: [PATCH] Remove DH parameter size from TLS guidelines

Cipher configuration no longer contains (integer) DH key exchange.
---
 docs/server-side-tls.html | 1 -
 1 file changed, 1 deletion(-)

diff --git a/docs/server-side-tls.html b/docs/server-side-tls.html
index 7585b1e..ac707b2 100644
--- a/docs/server-side-tls.html
+++ b/docs/server-side-tls.html
@@ -562,7 +562,6 @@ <h3 id="intermediate-compatibility"><span class="intermediate-heading">Intermedi
         <li>Protocols: <strong>TLS 1.2, TLS 1.3</strong></li>
         <li>TLS curves: <strong>X25519MLKEM768, X25519, prime256v1, secp384r1</strong></li>
         <li>Certificate type: <strong>ECDSA (P-256)</strong> (recommended), or <strong>RSA (2048 bits)</strong></li>
-        <li>DH parameter size: <strong>2048</strong> (ffdhe2048, <a href="https://tools.ietf.org/html/rfc7919#appendix-A.1">RFC 7919</a>)</li>
         <li>HSTS: <strong>max-age=63072000</strong> (two years)</li>
         <li>Certificate lifespan: <strong>90 days</strong> (recommended) to <strong>366 days</strong></li>
         <li>Cipher preference: <strong>client chooses</strong></li>