I am building an Apache webserver with TLS 1.2 and OpenSSL 1.0.1. So far, I have enabled 2 encryption algorithms - ECDHE AES-256 GCM and ECHDE AES-128 GCM.
Firefox and Chrome / Chromium use NSS which currently does not support AES-256 GCM, but it works with AES-256 CBC. Because they do not support AES-256 GCM, they fall back to AES-128 GCM.
I would like to enable AES-256 CBC, but I am not sure about the security of it.
This site http://uwnthesis.wordpress.com/2013/06/25/how-to-select-the-safest-encryption-using-aes-gcm-encryption-to-obtain-perfect-forward-secrecy/ states multiple times that CBC is insecure and should not be used.
Is it safer to use AES-128 GCM or AES-256 CBC?