5 ms·

Is there a similar tool that tests HTTPS enabled web servers on their choice of ciphers etc?

by dhbx9 9y ago

Maakuth 9y ago
https://www.ssllabs.com/ https://www.ssllabs.com/ is just that.
- l-p 9y ago
  Or https://testssl.sh/ https://testssl.sh/ if you don't want to rely on a third-party.
deleted 9y ago
[deleted]
AdamGibbins 9y ago
https://observatory.mozilla.org/ https://observatory.mozilla.org/ is a great all-in-one tool that does SSL, headers, and a bunch of other stuff - calls out to ssllabs among others.
weddpros 9y ago
https://sslping.com https://sslping.com even monitors your configuration every day for free
- scrollaway 9y ago
  What a wonderful little site. Thanks for the link!
  - weddpros 9y ago
    Thank you! (my site)... SSLPing didn't get as much attention on HN as SSHCheck does...
    - scrollaway 9y ago
      Well then let me thank you again :) Very slick UI, signed up in seconds, set myself up in under a minute. What are your plans with it? Just leaving a free service running or do you want to add paid plans as well? (and if not, I would recommend setting up at least a "Support" plan of some kind; it sends a strong signal)
      - weddpros 9y ago
        Thanks again :) I have no set plan yet (the site is 1yr old)... SSLPing monitors almost 6000 servers daily, 250+ users... so maybe I'll follow your advice with some kind of support plan (I was thinking of donations)
        scrollaway 9y ago
        > I was thinking of donations Common piece of feedback I have seen in many donation-driven software projects: Don't do donations. Do a support plan; even one as basic as "priority replies to emails". If a company wants to use your product, even if they want to pay, it's very hard to justify a donation whereas a support plan is far more readily bought.
bimmer44 9y ago
I've actually been building a tool that does just this during the current YC Startup School program. You can get on the launch list here: https://watchdog443.com https://watchdog443.com My main focus is ongoing alerting of changes to HTTPS configs rather than just a one off check. So you can be confident that everything is up to your spec or know as soon as something isn't. Because we'll know your setup we can also alert you to things you specifically should be aware of - for instance a browser policy change that would affect user experience due to your certificates not meeting the browser policy etc. Feel free to mail me if you'd like more info! (email in profile.) (PS. YC Startup School's virtual demo day is tomorrow if you're interested! All the startups that completed the course are posting a short demo video.)

Is there a similar tool that tests HTTPS enabled web servers on their choice of ciphers etc?

by dhbx9 9y ago

Is there a similar tool that tests HTTPS enabled web servers on their choice of ciphers etc?

Maakuth 9y ago

https://www.ssllabs.com/ https://www.ssllabs.com/ is just that.

l-p 9y ago
Or https://testssl.sh/ https://testssl.sh/ if you don't want to rely on a third-party.

deleted 9y ago

[deleted]

AdamGibbins 9y ago

https://observatory.mozilla.org/ https://observatory.mozilla.org/ is a great all-in-one tool that does SSL, headers, and a bunch of other stuff - calls out to ssllabs among others.

weddpros 9y ago

https://sslping.com https://sslping.com even monitors your configuration every day for free

scrollaway 9y ago
What a wonderful little site. Thanks for the link!
- weddpros 9y ago
  Thank you! (my site)... SSLPing didn't get as much attention on HN as SSHCheck does...
  - scrollaway 9y ago
    Well then let me thank you again :) Very slick UI, signed up in seconds, set myself up in under a minute. What are your plans with it? Just leaving a free service running or do you want to add paid plans as well? (and if not, I would recommend setting up at least a "Support" plan of some kind; it sends a strong signal)
    - weddpros 9y ago
      Thanks again :) I have no set plan yet (the site is 1yr old)... SSLPing monitors almost 6000 servers daily, 250+ users... so maybe I'll follow your advice with some kind of support plan (I was thinking of donations)
      - scrollaway 9y ago
        > I was thinking of donations Common piece of feedback I have seen in many donation-driven software projects: Don't do donations. Do a support plan; even one as basic as "priority replies to emails". If a company wants to use your product, even if they want to pay, it's very hard to justify a donation whereas a support plan is far more readily bought.

bimmer44 9y ago

I've actually been building a tool that does just this during the current YC Startup School program. You can get on the launch list here: https://watchdog443.com https://watchdog443.com My main focus is ongoing alerting of changes to HTTPS configs rather than just a one off check. So you can be confident that everything is up to your spec or know as soon as something isn't. Because we'll know your setup we can also alert you to things you specifically should be aware of - for instance a browser policy change that would affect user experience due to your certificates not meeting the browser policy etc. Feel free to mail me if you'd like more info! (email in profile.) (PS. YC Startup School's virtual demo day is tomorrow if you're interested! All the startups that completed the course are posting a short demo video.)