Hi @fool - wondering if there’s an update on this?
While SSL Labs does score sites on Netlify as A+, it does also show that Netlify supports weak ciphers known to be vulnerable to BREACH and LUCKY13 attacks. SSL Server Test: netlify.com (Powered by Qualys SSL Labs)
Those being CBC mode ciphers - TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256 and TLS_DHE_RSA_WITH_AES_128_CBC_SHA256