As far as I understand, Forward Secrecy is the current way to go and mitigate issues like the Heartbleed bug. Thus, I followed the advice at the Mozilla Wiki (via) and now the secure HTTP connection to p3k.org is rated “A” (instead of “A-”) at the Qualys SSL Labs.