3 ms·

It’s clearly not Apple.com, it’s appleid.org

• lern_too_spel 7y ago
  Both belong to Apple and are vulnerable to Zombie POODLE. https://www.ssllabs.com/ssltest/analyze.html?d=apple.com&s=17.142.160.59 https://www.ssllabs.com/ssltest/analyze.html?d=apple.com&s=1...
  • theandrewbailey 7y ago
    > SSL Labs will start giving “F” grade to the server affected by these vulnerabilities from end of May 2019.[0] This is due to the server supporting cipher block chaining (CBC) cipher modes. Almost everyone has been moving towards Galois counter mode (GCM) ciphers for several years. [0] https://blog.qualys.com/technology/2019/04/22/zombie-poodle-and-goldendoodle-vulnerabilities https://blog.qualys.com/technology/2019/04/22/zombie-poodle-...
    • kayfox 7y ago
      Do they even test for the vulnerability? The blog post is unclear.