서버 SSL/TLS 테스트 받아보기

서버 SSL/TLS 테스트 받아보기 > 자유게시판

자유게시판

서버 SSL/TLS 테스트 받아보기 정보

서버 SSL/TLS 테스트 받아보기

LucyLee 홈페이지 자기소개 아이디로 검색 회원게시물 (121.♡.♡.62)
2017.12.04 10:43:06
1,485

본문

Protocol Details

DROWN

No, server keys and hostname not seen elsewhere with SSLv2

(1) For a better understanding of this test, please read this longer explanation
(2) Key usage data kindly provided by the Censys network search engine; original DROWN website here
(3) Censys data is only indicative of possible key and certificate reuse; possibly out-of-date and not complete

Secure Renegotiation

Supported

Secure Client-Initiated Renegotiation

Insecure Client-Initiated Renegotiation

BEAST attack

Not mitigated server-side (more info) SSL 3: 0xa, TLS 1.0: 0xa

POODLE (SSLv3)

Vulnerable INSECURE (more info) SSL 3: 0xa

POODLE (TLS)

No (more info)

Downgrade attack prevention

Yes, TLS_FALLBACK_SCSV supported (more info)