I am building an Apache webserver with TLS 1.2 and OpenSSL 1.0.1. So far, I have enabled 2 encryption algorithms - ECDHE AES256 GCM and ECHDE AES128 GCM.
Firefox and Chrome(ium) use NSS which currently does not support AES256 GCM, but it works with AES256 CBC. Because they do not support AES256 GCM, they fall back to AES128 GCM.
I would like to enable AES256 CBC, but I am not sure about the security of it.
This site http://uwnthesis.wordpress.com/2013/06/25/how-to-select-the-safest-encryption-using-aes-gcm-encryption-to-obtain-perfect-forward-secrecy/ states multiple times that CBC is insecure and should not be used.
Is it safer to use AES128 GCM or AES256 CBC?