Disclaimer

Any opinions expressed here are my own and not necessarily those of my employer (I'm self-employed).

Sep 2, 2010

SSL/TLS configuration, figure it out!

There are several ways to figure out  the SSL/TLS configuration of a webserver. If you're dealing with an Internet facing server, the quickest solution is to use a webpage like www.ssllabs.com or www.serversniff.net (Webserver -> SSL Info). SSLLabs will give a "management friendly" presentation of a server's SSL/TLS configuration, underlining that you need not be all l33t H4x0r to uncover a lax security config.

Another option is to use a standalone tool, such as ssldigger — or Mozilla Firefox! SSL ciphers can easily be enabled and disabled through the Firefox advanced configuration. Simply enter "about:config" in the address bar to access all Firefox configuration options. To filter the options for SSL/TLS, input "security" in the filter bar.
Firefox SSL/TLS configuration

All supported SSL/TLS cipher suites are listed and can be enabled or disabled at will.

SSL/TLS negotiates a cipher suite based on the list of supported cipher suites on the client and server. I.e. the client sends a list of supported cipher suites, and the server selects its preferred suite. If no common suite is found, the setup of the connection fails.

To figure out which encryption method has been selected for a particular site, check out "Security" under "Tools" -> "Page info". You can also double click on the padlock, or the green name in the address bar, while visiting a site using HTTPS.
Easy, huh? :)

21 comments:

  1. Modern technologies mean a lot for me, cause even when I write I use info from Internet source, so I think that it's everywhere now. You can go here and see it.

    ReplyDelete
  2. Hello guys do you know that going through a review of websites will give you much insight about it which you can’t know by simply visiting it, Here is the
    All assignment help Reviews that reviews the website and provides you the best website .

    ReplyDelete
  3. I am glad to find amazing information from the blog. Thanks for sharing the information. for more useful Information visit:
    Digital marketing training institute in Jaipur
    Digital Marketing Course in Jaipur

    ReplyDelete
  4. We provide online Custom Term Paper Writing Service designed to the precise requirements of our client base hailing from various academic levels. our Urgent Essay Writing Service delivery is timely and prompt.

    ReplyDelete
  5. الديدان الأسطوانية تُشترى الديدان الأسطوانية من أي مشتل، وتُوضع فوراً في تربة تصل درجة حرارتها إلى 16 درجة مئوية. تُوضع الديدان في الصباح الباكر أو في ساعات المغرب في أماكن وجود النمل حتى تقضي عليه. عرض الخشب لأشعة الشمس تُخرج قطع الأثاث من المنزل، وتُعرض تحت أشعة الشمس. تُترك قطع الأثاث في الشمس لمدة لا تقل عن يومين حتى يُقتل النمل. Volume 0%

    شركة مكافحة حشرات ببريدة
    شركة مكافحة حشرات بحائل
    شركة مكافحة حشرات بالقصيم
    شركة مكافحة حشرات بالاحساء

    ReplyDelete
  6. The post you shared is very unique and informative.I enjoyed reading this. thanks! THere are a lots mermazing blogs as yours on instagram, please go to link picbear to see it.

    ReplyDelete
  7. How amazing Your information is very detailed and useful to me, thank you for sharing. I hope you will always be up to date. We also provide affordable Your information is very detailed and useful to me, thank you for sharing. I hope you will always be up to date. AND ABS Consulting is a top seo agency in USA. We best provide professional seo services.
    Visit this sites : https://www.absconsulting.in/

    ReplyDelete
  8. When it comes to ordering your University Assignments, College Essays, need help with Homework or any other academic help, then My Assignment Help is the best website you can order your assignment from.
    Marketing assignment help
    Nursing assignment help
    Online assignment help
    Case Study help
    Urgent Assignment help
    Essay help online

    ReplyDelete
  9. PH UV Printer is the best and authorized uv printer supplier in india that provide you the best quality uv printer in india so that you can easily print custom design over your products to make them unique and you can easily charge more for them. If you want to know more then you can visit the official website of PH UV printer. If you want something entertaining and best for you then you should visit the official shayari ka pitara website - best shayari website in hindi that will provide you the best cute shayari in hindi online for you.

    ReplyDelete
  10. Palmetto's season seemed to be to reduced, And as a consequence Ferguson's scholarship (Ray Ban Outlet) grants gone (New Yeezys 2020) away. He or (Michael Kors Outlet Store) tested university or (Coach Outlet Online) faculty throughout Bethune Cookman merely flunked elsewhere. A very as soon as possible 1994, He was regarded (Michael Kors Outlet) as out on the road.

    Alone who consult with me upon track checklist had become dave Mata, Director within the kansas city public organization, The chief negotiating enterprise during officials. (Coach Outlet Store Online) He explained, Put on accept key community centre has the resolution to the in the metropolis of (Michael Kors Outlet Online) dallas, tx right this moment.The touch of suspicion we have that i never discussed by working that have any sort of director inside DPA who enjoyed reading

    ReplyDelete
  11. You have well written post about SSL/TLS configuration because it is very necessary to know about protocol that is used between a web server and its clients to establish trust? Buy Assignment Online

    ReplyDelete
  12. Thanks for sharing it is important for me. I also searched for that from here. Visit our site bellen lenovo belgie

    ReplyDelete

Copyright notice

© André N. Klingsheim and www.dotnetnoob.com, 2009-2018. Unauthorized use and/or duplication of this material without express and written permission from this blog’s author and/or owner is strictly prohibited. Excerpts and links may be used, provided that full and clear credit is given to André N. Klingsheim and www.dotnetnoob.com with appropriate and specific direction to the original content.

Read other popular posts