3 ms·
>>> The security treadmill is hard for even the most modern tech companies to stay on. I think the infosec community could go a long way to helping itself by ma
by user5994461 8y ago
>>> The security treadmill is hard for even the most modern tech companies to stay on. I think the infosec community could go a long way to helping itself by making easier to use tools, and writing canonical guides for common scenarios. Setting up HTTPS to get an "A" from SSLLabs is non-trivial. Securing SSH with perfect forward secrecy is near impossible for a mortal. There's no reason it has to be this complicated.
Agreed on this. Security is too hard to do right and too hard to check. There are no 2 guides or 2 people that agree on the same recommendation.
SSL labs is a perfect example where the top rating is not realistic to obtain.
- __david__ 8y agoAre you kidding about ssllabs? Every site I host gets an "A" rating, with practically zero effort. What are you running where you can't manage that?
- Postremus 8y agoYep. I set up a few traefik instances a while ago with the integrated Lets Encrypt support. All of them have at least an A on ssllabs. All of this, without actually configuring any of the ssl /tls settings myself.
- user5994461 8y agoI might be confusing SSL labs with another verification tool that always give B and C.