You can use something like:   if( http.getMethod() == "POST" ) {     # handle POST request ... }   to test for a POST.   You could also and (&&) this with http.getResponseHeader( "Content-Type" ) to match on POSTs for specific Content-Type(s).   $body = http.getBody() can be used to get a copy of the POST data.   http.getFormParams() returns a hash mapping the names of all the form parameters present in the URL query string and, if the request is a POST, in the POST body data to their values. If the same parameter appears multiple times in the request then it will be mapped to an array of values in the hash that is returned by this function.   You might also want to look at the following TrafficScript functions:   http.getFormParam( Parameter, [Separator] ) http.listFormParamNames() http.doesFormParamExist   ... View more

You should be able to get an A score if you change the list and order of cyphers as follows:   SSL_ECDHE_RSA_WITH_AES_128_GCM_SHA256  SSL_ECDHE_RSA_WITH_AES_128_CBC_SHA256  SSL_ECDHE_RSA_WITH_AES_128_CBC_SHA  SSL_ECDHE_RSA_WITH_AES_256_GCM_SHA384  SSL_ECDHE_RSA_WITH_AES_256_CBC_SHA384  SSL_ECDHE_RSA_WITH_AES_256_CBC_SHA  SSL_RSA_WITH_AES_128_GCM_SHA256  SSL_RSA_WITH_AES_128_CBC_SHA256  SSL_RSA_WITH_AES_128_CBC_SHA  SSL_RSA_WITH_AES_256_GCM_SHA384  SSL_RSA_WITH_AES_256_CBC_SHA256  SSL_RSA_WITH_AES_256_CBC_SHA  SSL_RSA_WITH_3DES_EDE_CBC_SHA    Further, you should be able to get an A+ score if you add the following TrafficScript rule as a response rule on your TLS virtual servers:   http.setResponseHeader( "Strict-Transport-Security”, "max-age=31622400” );   ... View more